magento-eav-attributes

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to retrieve live documentation and tutorials from external web sources to implement attribute patterns. * Ingestion points: Data retrieved via WebSearch and WebFetch tools, including general searches for EAV data patch patterns (SKILL.md). * Boundary markers: No specific boundary markers or instructions to ignore potential commands within the fetched external content are provided. * Capability inventory: The skill allows the use of Bash, Write, and Edit tools, which could be exploited if the agent executes instructions found in untrusted external documentation. * Sanitization: There are no instructions for the agent to sanitize or validate the content retrieved from web sources before processing or acting upon it.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 11:32 AM