magento-eav-attributes
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to retrieve live documentation and tutorials from external web sources to implement attribute patterns. * Ingestion points: Data retrieved via
WebSearchandWebFetchtools, including general searches for EAV data patch patterns (SKILL.md). * Boundary markers: No specific boundary markers or instructions to ignore potential commands within the fetched external content are provided. * Capability inventory: The skill allows the use ofBash,Write, andEdittools, which could be exploited if the agent executes instructions found in untrusted external documentation. * Sanitization: There are no instructions for the agent to sanitize or validate the content retrieved from web sources before processing or acting upon it.
Audit Metadata