medusa-orders

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches live documentation and API interface definitions from docs.medusajs.com, which is the official documentation host for the Medusa e-commerce project. These references are used to ensure the agent uses up-to-date service methods and workflow patterns.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest external data from web searches and specific documentation URLs. While this creates a surface for indirect prompt injection, the sources are restricted to official project documentation, and the ingested data is used for legitimate technical reference.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 06:33 PM