bc-payments
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides correct architectural and implementation guidance for BigCommerce payments, including appropriate warnings regarding PCI DSS compliance and raw card data handling.- [EXTERNAL_DOWNLOADS]: Fetches documentation and references API endpoints from official BigCommerce domains (docs.bigcommerce.com and payments.bigcommerce.com), which are well-known services for the described functionality.- [INDIRECT_PROMPT_INJECTION]: A potential surface is identified as the skill instructions include fetching external documentation. Mandatory Evidence Chain: (1) Ingestion points: WebFetch and WebSearch tools are used in SKILL.md. (2) Boundary markers: Absent. (3) Capability inventory: The skill has access to file system tools (Read, Write, Edit) and command execution (Bash). (4) Sanitization: Absent. The injection surface targets trusted documentation sources for a well-known service.
Audit Metadata