printify
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the Printify API, which could potentially contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: Catalog data, product details, and order information retrieved via the
printifyCLI (SKILL.md). - Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions embedded within the retrieved data.
- Capability inventory: The skill has the ability to create orders that may trigger financial charges, manage product listings, and upload files using the
printifyCLI (SKILL.md, manifest.yaml). - Sanitization: There are no instructions for sanitizing or escaping the content retrieved from the external API before it is processed by the agent.
Audit Metadata