fluentcart-products-inventory
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for importing and synchronizing product data, which establishes a surface for indirect prompt injection if the imported data contains malicious instructions targeting the agent.
- Ingestion points: The skill is designed to handle product creation, updates, and batch imports (SKILL.md, "Write through coordinated APIs").
- Boundary markers: No specific delimiters or boundary markers for external data are mentioned in the instructions.
- Capability inventory: The skill utilizes
ProductResource,ProductVariationResource, and WordPress APIs to perform database mutations and synchronization (SKILL.md, "Write through coordinated APIs"). - Sanitization: The instructions explicitly recommend normalizing amounts to integers, validating SKU uniqueness, and verifying purchasability as part of the import process (SKILL.md, "For batch import").
Audit Metadata