ecommerce-tiktok-new-product-rank
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves product data from an external API (EchoTik) and provides it to the agent for analysis and display.
- Ingestion points: Data enters the agent's context through the output of the
scripts/echotik_list_new_product_rank.pyscript, which fetches data from a remote API. - Boundary markers: The instructions lack specific boundary markers or warnings to the agent to treat the ingested data as untrusted content.
- Capability inventory: The skill has the capability to write files to the local directory (caching and data storage) and perform network operations via Python's
urllib. - Sanitization: There is no evidence of sanitization or filtering of the external product titles or metadata before they are processed by the agent.
- [COMMAND_EXECUTION]: The skill involves executing a local Python script (
scripts/echotik_list_new_product_rank.py) to perform its primary function. This is standard behavior for this type of skill.
Audit Metadata