medusa-payments
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and interface definitions from Medusa's official documentation domain (
docs.medusajs.com). These references are used to ensure the agent has the latest service methods and provider abstractions. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by design, as it processes external documentation content.
- Ingestion points: Documentation retrieved via
WebFetchfrom Medusa's official site. - Boundary markers: None defined for the fetched documentation content.
- Capability inventory: The skill utilizes
Bash,Write,Edit,Read,WebSearch, andWebFetchtools. - Sanitization: There is no explicit sanitization of the fetched external text before it is processed by the agent.
Audit Metadata