commercevault-edd-commerce-orchestrator
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSMETADATA_POISONINGINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct users to clone source code from an unverified GitHub repository (https://github.com/dhapat3927/mcp-edd-analytics-vantage.git) and execute it using
node server.js. Downloading and running code from unverified third-party sources represents a high risk of remote code execution.\n- [METADATA_POISONING]: The skill documentation exhibits conflicting attribution, claiming to be provided by "ara.so" while the skill itself is attributed to "reason-machines" in system metadata, and the code repository belongs to a third user "dhapat3927". This lack of consistent identity and ownership obscures the software's true origin.\n- [INDIRECT_PROMPT_INJECTION]: The skill acts as an interface for e-commerce data which may contain attacker-controlled content.\n - Ingestion points: Fetches data from external WordPress sites via the Easy Digital Downloads REST API, including product details, order history, and customer profiles (e.g., edd.getProducts, edd.getOrders).\n
- Boundary markers: The instructions lack delimiters or explicit directives for the agent to ignore or treat data from the API as untrusted content.\n
- Capability inventory: The skill can perform network requests, manage digital licenses, and modify product information on the target WordPress site.\n
- Sanitization: There is no evidence that data returned from the API is validated or sanitized before being presented to the agent's context.
Recommendations
- AI detected serious security threats
Audit Metadata