commerce-voc-triage
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a high-level orchestrator for commerce data analysis. It defines clear boundaries for data processing and delegates specific tasks, such as copy generation or presentation design, to other specialized skills within the 'moai' vendor ecosystem.
- [EXTERNAL_DOWNLOADS]: The skill interacts with well-known commerce and social media services (Naver Commerce API, Coupang Wing API, YouTube Data API, Instagram Graph API) to retrieve review data. These operations are essential to its primary function and target official service endpoints without suspicious redirection.
- [SAFE]: The architecture includes an 'Indirect Prompt Injection' surface as it processes external customer reviews; however, it implements automated safety checks by chaining the output to a verification module (
moai-core:ai-slop-reviewer). This helps filter unwanted patterns or embedded instructions from the input data. - [SAFE]: No evidence of obfuscation, hardcoded credentials, privilege escalation, or persistence mechanisms was found in the skill instructions.
Audit Metadata