readiness-audit
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute several Python probe scripts such as readiness_audit.py and probe_transact.py located in the plugin's scripts directory to perform automated site auditing.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from external websites to determine commerce readiness, creating a potential surface for indirect instructions to be processed by the agent.
- Ingestion points: Data is retrieved from external URLs using the WebFetch tool and specialized probe scripts referenced in SKILL.md; additionally, fixing skills are described as fetching live specifications from remote sources.
- Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore content that may be masquerading as instructions within the audited site responses or live specifications.
- Capability inventory: The skill utilizes tools including Bash, Write, Edit, and WebFetch to interpret site results and apply code changes to the user's project.
- Sanitization: There is no requirement in the skill instructions to sanitize or validate the content of the audited site before interpreting it against the scoring rubrics.
Audit Metadata