price-optimization-tool
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation instructions use
npxto execute theskillstool for adding resources from the author'snexscope-ai/eCommerce-Skillsrepository. This is an expected installation path for vendor-provided skills. - [PROMPT_INJECTION]: The skill ingests untrusted data from competitor offers and market traffic, which represents a surface for indirect prompt injection.
- Ingestion points: Market and competitor data points listed in the 'Inputs and Collection' section of
SKILL.md. - Boundary markers: The skill relies on a structured analysis template but does not explicitly use delimiters to separate external data.
- Capability inventory: The provided files contain no executable scripts or capabilities for file system modification or unauthorized network access.
- Sanitization: The instructions emphasize data auditing and alignment for accuracy but do not detail technical sanitization of external text inputs.
Audit Metadata