saleor-shipping

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides legitimate instructions for configuring shipping zones, methods, and warehouse allocation within the Saleor e-commerce platform. The tools requested and the operations described are consistent with its stated purpose of configuring a developer environment.
  • [EXTERNAL_DOWNLOADS]: The skill fetch documentation from docs.saleor.io. Saleor is a well-known technology service, and retrieving configuration guidelines from its official documentation site is a standard and expected operation.
  • [INDIRECT_PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by design, as it involves fetching and processing documentation from external sources.
  • Ingestion points: Retrieval of live documentation and search results via WebSearch and WebFetch (e.g., docs.saleor.io).
  • Boundary markers: Not explicitly defined in the provided instructions.
  • Capability inventory: The skill utilizes Read, Write, Edit, and Bash tools for file and system manipulation.
  • Sanitization: The instructions do not specify a sanitization layer for the retrieved documentation content.
  • Context: Given the sources are official documentation for a well-known service, the risk is negligible and consistent with developer tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 06:33 PM