ecommerce-tiktok-product-search
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection due to its handling of external product data from the EchoTik API.
- Ingestion points: The
scripts/echotik_list_product.pyscript retrieves data from a remote API endpoint at${NEXSCOPE_PROXY_BASE}/api/v1/tools/research/echotik/listProduct. - Boundary markers: The instructions in
SKILL.mddo not implement boundary markers or instructions to treat the ingested API data as untrusted content. - Capability inventory: The skill uses a Python script capable of making network requests and writing files to the local file system (within the
./nexscope/directory). - Sanitization: No explicit sanitization, validation, or filtering of the API response data is performed before the agent processes the information.
Audit Metadata