medusa-fulfillment
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data, which creates an indirect prompt injection surface.
- Ingestion points: The skill instructs the agent to fetch documentation from docs.medusajs.com using WebFetch and WebSearch tools as specified in SKILL.md.
- Boundary markers: No specific markers or warnings are included to ensure the agent disregards instructions that might be embedded in the fetched documentation.
- Capability inventory: The agent is granted access to tools such as Bash, Write, and Edit, which provide a significant capability set if an injection occurs.
- Sanitization: There is no mention of sanitizing or validating the content of the external documentation before it influences the agent's actions.
Audit Metadata