bc-api-graphql
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches current API documentation and schema references from BigCommerce's official developer domain (developer.bigcommerce.com). This is categorized as safe as it targets a well-known and trusted service for its intended purpose.
- [DATA_EXFILTRATION]: No unauthorized data access or exfiltration patterns were detected. The skill uses appropriate placeholders for store domains and authentication tokens, ensuring no sensitive credentials are hardcoded.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface through WebFetch and WebSearch for documentation. However, these operations target trusted domains and are restricted to retrieving technical documentation, presenting no immediate security risk.
Audit Metadata