bc-widgets

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to fetch live documentation and search for API details from external sources.
  • Ingestion points: SKILL.md (WebFetch to developer.bigcommerce.com).
  • Boundary markers: No delimiters or specific "ignore embedded instructions" warnings are provided for the fetched data.
  • Capability inventory: The skill is allowed access to high-privilege tools including Bash, Write, Edit, and WebFetch.
  • Sanitization: No explicit validation or filtering logic is defined for the externally fetched documentation content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 06:33 PM