saleor-channels

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches content from https://docs.saleor.io/docs/developer/channels. This is the official documentation for Saleor, a well-known e-commerce platform, and is considered a legitimate source.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external web sources, which introduces a surface for indirect instructions to be processed by the agent.
  • Ingestion points: The skill uses WebFetch to retrieve documentation and WebSearch to find channel configuration and pricing details as specified in SKILL.md.
  • Boundary markers: The instructions do not include explicit delimiters or warnings to ignore instructions that might be embedded within the fetched external data.
  • Capability inventory: The skill is configured with access to powerful tools including Bash, Write, and Edit.
  • Sanitization: There are no instructions for validating or sanitizing the content retrieved from external searches and fetches before it is used by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 06:34 PM