prestashop-module-development
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMOBFUSCATIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [OBFUSCATION]: The skill provides minified JavaScript bundles (
scripts/grid.bundle.jsandscripts/translatable-form.bundle.js) to support grid and form features. This minification obscures implementation details, making the logic unverifiable for security purposes. - [COMMAND_EXECUTION]: The procedure requires running local shell commands, including
php bin/consoleand a vendor-specific developer tool (lotr), to install modules and perform code quality checks. - [DYNAMIC_EXECUTION]: The skill employs automated file patching to inject code into PrestaShop theme templates (
theme-template-injection.md) and utilizessedcommands to dynamically modify JavaScript assets during the setup process. - [INDIRECT_PROMPT_INJECTION]: As the skill is designed to read and refactor existing module source code, it possesses an attack surface for indirect prompt injection, where malicious instructions embedded in code comments or documentation could influence the agent's behavior.
Audit Metadata