ecommerce-tiktok-seller-detail
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the EchoTik API, which acts as an external ingestion point for untrusted content that could contain malicious instructions.
- Ingestion points: Data is retrieved via the
call_apifunction inscripts/tiktok_seller_detail.pyusing a POST request to a remote endpoint. - Boundary markers: There are no explicit boundary markers or instructions defined in the skill to prevent the agent from following instructions embedded within the API response.
- Capability inventory: The skill has the capability to write files to the local project directory (
open(out_path, "w")) and initiate network connections viaurllib.request.urlopen. - Sanitization: The API response is processed and output to the user or saved to the filesystem without sanitization or validation to filter out potential prompt injection attempts.
Audit Metadata