prestashop-store-update
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the PrestaShop console to run update-related tasks including 'update:check-new-version', 'update:check-requirements', and 'update:start' from the module's binary path.
- [EXTERNAL_DOWNLOADS]: It directs the agent to fetch and analyze external content from the official PrestaShop GitHub repository to identify known issues.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection by processing external data from public GitHub discussions. Ingestion points: External content from the GitHub URL in SKILL.md. Boundary markers: Absent. Capability inventory: Shell command execution through bin/console. Sanitization: None.
- [DATA_EXFILTRATION]: The skill requests the module path and admin folder name, exposing local directory structures to the agent context, which is required for its administrative tasks.
Audit Metadata