ecommerce-tiktok-shop-analytics
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and processes shop data from an external source (Kalodata API), which is then incorporated into the agent's context. This creates a surface where malicious instructions could be embedded in store metadata or names to influence the agent.
- Ingestion points: API responses from the rank and detail endpoints are processed in
scripts/shop_rank.pyandscripts/shop_detail.py. - Boundary markers: Absent; the skill does not specify the use of delimiters or 'ignore' instructions to isolate the external content from the agent's logic.
- Capability inventory: The skill possesses network communication capabilities and file system write access for saving JSON data to the local project directory.
- Sanitization: There is no evidence of content sanitization or validation performed on the text fields returned by the external API before they are presented or saved.
Audit Metadata