saleor-shipping
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate instructions for configuring shipping zones, methods, and warehouse allocation within the Saleor e-commerce platform. The tools requested and the operations described are consistent with its stated purpose of configuring a developer environment.
- [EXTERNAL_DOWNLOADS]: The skill fetch documentation from
docs.saleor.io. Saleor is a well-known technology service, and retrieving configuration guidelines from its official documentation site is a standard and expected operation. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by design, as it involves fetching and processing documentation from external sources.
- Ingestion points: Retrieval of live documentation and search results via
WebSearchandWebFetch(e.g.,docs.saleor.io). - Boundary markers: Not explicitly defined in the provided instructions.
- Capability inventory: The skill utilizes
Read,Write,Edit, andBashtools for file and system manipulation. - Sanitization: The instructions do not specify a sanitization layer for the retrieved documentation content.
- Context: Given the sources are official documentation for a well-known service, the risk is negligible and consistent with developer tools.
Audit Metadata