commercevault-edd-ecommerce-api
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation instructions direct users to clone and execute code from an unverified third-party GitHub repository.
- Evidence:
git clone https://github.com/dhapat3927/mcp-edd-analytics-vantage.git(SKILL.md) - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external e-commerce store endpoints (products, orders, customers) and possesses sensitive write capabilities, creating a surface for indirect instructions to influence agent behavior.
- Ingestion points: Data retrieved via
list_orders,get_product, andget_customertools in SKILL.md. - Boundary markers: No explicit boundary markers or instruction-ignore wrappers are documented for processing external store data.
- Capability inventory: The skill can perform sensitive operations including
create_refund,create_order,update_product, andactivate_license(SKILL.md). - Sanitization: No sanitization or validation logic is described for external data before it is passed to the agent context.
Audit Metadata