medusa-pricing
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches technical documentation and API specifications from the official MedusaJS documentation site (docs.medusajs.com). As this is a well-known documentation service, the activity is considered standard and safe reference behavior.\n- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest external content from documentation sources via WebFetch.\n
- Ingestion points: Technical documentation fetched from docs.medusajs.com in SKILL.md.\n
- Boundary markers: No explicit delimiters or safety instructions are defined to separate the external content from the agent's core instructions.\n
- Capability inventory: The skill allows file system operations (Write, Edit), shell command execution (Bash), and network access (WebSearch, WebFetch).\n
- Sanitization: There is no implementation of explicit sanitization or validation for the content retrieved from the external source.
Audit Metadata