google-merchant-center
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the @membranehq/cli package, which is an official tool from the vendor. This is standard functionality for interacting with the Membrane platform.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from Google Merchant Center, establishing a surface for indirect prompt injection. 1. Ingestion points: Data retrieved through Merchant Center list and get actions. 2. Boundary markers: Not explicitly used. 3. Capability inventory: Capability to execute actions and proxy requests via the Membrane CLI. 4. Sanitization: No manual sanitization is implemented in the instruction set.
Audit Metadata