odoo-edi-connector
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
pyx12Python library for handling X12 EDI files. This is a standard utility library typically installed from official package registries. - [COMMAND_EXECUTION]: The provided Python code demonstrates the use of Odoo's XML-RPC API (
xmlrpc.client.ServerProxy) to search for partner records and create sales orders. These are standard operations for Odoo integrations. - [CREDENTIALS_UNSAFE]: The examples use clear placeholders for sensitive information like the Odoo URL, database name, and API keys, which is standard practice for documentation and does not represent a credential leak.
- [PROMPT_INJECTION]: The skill processes external EDI data which constitutes a surface for indirect prompt injection.
- Ingestion points: The
process_850function accepts an external file path to parse EDI content. - Boundary markers: The logic does not specify delimiters or warnings for the agent to ignore instructions that might be embedded in the EDI transaction segments.
- Capability inventory: The skill has the capability to write to an Odoo database via the
models.execute_kwmethod. - Sanitization: No explicit sanitization or validation of data extracted from the EDI segments (such as partner names or SKUs) is shown in the mapping example.
Audit Metadata