saleor-channels
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches content from
https://docs.saleor.io/docs/developer/channels. This is the official documentation for Saleor, a well-known e-commerce platform, and is considered a legitimate source. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external web sources, which introduces a surface for indirect instructions to be processed by the agent.
- Ingestion points: The skill uses
WebFetchto retrieve documentation andWebSearchto find channel configuration and pricing details as specified inSKILL.md. - Boundary markers: The instructions do not include explicit delimiters or warnings to ignore instructions that might be embedded within the fetched external data.
- Capability inventory: The skill is configured with access to powerful tools including
Bash,Write, andEdit. - Sanitization: There are no instructions for validating or sanitizing the content retrieved from external searches and fetches before it is used by the agent.
Audit Metadata