odoo-edi-connector

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the pyx12 Python library for handling X12 EDI files. This is a standard utility library typically installed from official package registries.
  • [COMMAND_EXECUTION]: The provided Python code demonstrates the use of Odoo's XML-RPC API (xmlrpc.client.ServerProxy) to search for partner records and create sales orders. These are standard operations for Odoo integrations.
  • [CREDENTIALS_UNSAFE]: The examples use clear placeholders for sensitive information like the Odoo URL, database name, and API keys, which is standard practice for documentation and does not represent a credential leak.
  • [PROMPT_INJECTION]: The skill processes external EDI data which constitutes a surface for indirect prompt injection.
  • Ingestion points: The process_850 function accepts an external file path to parse EDI content.
  • Boundary markers: The logic does not specify delimiters or warnings for the agent to ignore instructions that might be embedded in the EDI transaction segments.
  • Capability inventory: The skill has the capability to write to an Odoo database via the models.execute_kw method.
  • Sanitization: No explicit sanitization or validation of data extracted from the EDI segments (such as partner names or SKUs) is shown in the mapping example.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 10:44 PM
Security Audit — agent-trust-hub — odoo-edi-connector