commerce-integrated-strategy

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists of strategic frameworks and documentation for e-commerce sellers. A thorough analysis of the skill files revealed no malicious code, credential harvesting, or unauthorized network operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data sources such as commerce platform exports and user-provided screenshots, which represents an indirect prompt injection surface. However, the risk is negligible as the skill lacks access to high-risk tools or system execution capabilities.
  • Ingestion points: Dashboard data, exported files, and screenshots provided by the user (SKILL.md).
  • Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands in the input data.
  • Capability inventory: The skill's output is limited to text generation for reports and strategies; no subprocess, network, or file-writing tools are utilized.
  • Sanitization: No input validation or sanitization mechanisms are identified in the provided content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 01:41 PM
Security Audit — agent-trust-hub — commerce-integrated-strategy