ecommerce-etsy-category-search

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from a third-party marketplace service which represents a potential indirect prompt injection surface.
  • Ingestion points: scripts/etsy_category_search.py retrieves category data from an external API.
  • Boundary markers: Absent.
  • Capability inventory: The script writes to the local filesystem (nexscope/ directory) and prints data to stdout.
  • Sanitization: Absent.
  • [COMMAND_EXECUTION]: The skill documentation provides instructions for executing the included Python script (scripts/etsy_category_search.py) for debugging and category data retrieval.
  • [EXTERNAL_DOWNLOADS]: The Python script performs network requests to the NexScope proxy API to fetch Etsy category metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:13 AM
Security Audit — agent-trust-hub — ecommerce-etsy-category-search