skills/nexscope-ai/nexscope-ecommerce-skills/ecommerce-product-description-generator-api/Gen Agent Trust Hub
ecommerce-product-description-generator-api
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests text generated by external AI models, creating a potential surface for indirect prompt injection if the generated content contains malicious instructions.
- Ingestion points: The
contentfield retrieved from the task query endpoint inscripts/aigc_textgen.py. - Boundary markers: The script uses newline encoding (⏎) and the
SKILL.mdinstructions emphasize distinguishing between facts and recommendations. - Capability inventory: The skill performs network requests via
urlliband writes data/media files to the local file system. - Sanitization: Implementation includes newline encoding and a recursive redaction process for secrets in response payloads.
- [EXTERNAL_DOWNLOADS]: The skill includes a utility function to fetch media from external sources.
- Evidence: The
download_mediafunction inscripts/aigc_textgen.pyallows downloading content from arbitraryhttp/httpsURLs provided in the task payload.
Audit Metadata