medusa-workflows
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches live architectural and API documentation from the official Medusa documentation site (
docs.medusajs.com). - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external web searches and fetches to retrieve up-to-date documentation.
- Ingestion points: Web searches and fetching operations targeting the
docs.medusajs.comdomain as described in the 'Before writing code' section. - Boundary markers: No explicit delimiters or boundary markers are defined for the fetched documentation content.
- Capability inventory: The skill is configured with
Bash,Write, andEdittools across the provided code snippets and execution context. - Sanitization: No explicit sanitization or validation of the content retrieved from documentation sites is performed before it is processed by the agent.
Audit Metadata