saleor-payments
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions align with standard development practices for the Saleor platform and reference official, well-known documentation sources for implementation details.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it is designed to ingest external data from documentation websites via WebFetch and WebSearch.
- Ingestion points: Instructions to fetch overview and integration documents from docs.saleor.io in the 'Before writing code' section.
- Boundary markers: The skill does not provide specific boundary markers or instructions to ignore potential commands embedded in the fetched documentation.
- Capability inventory: The skill allows usage of Bash, Write, Edit, WebSearch, and WebFetch tools.
- Sanitization: No explicit sanitization or validation of the fetched documentation content is mentioned.
Audit Metadata