sales-trustpilot
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references the official 'trustpilot' Python SDK and various verified ecommerce integrations (Shopify, WooCommerce, Magento 2) hosted on the official Trustpilot GitHub organization. These are well-known and official resources for the platform.
- [PROMPT_INJECTION]: The skill maintains a 'learnings.md' file to accumulate platform knowledge, which creates an indirect prompt injection surface. 1. Ingestion points: The agent reads from 'references/learnings.md' at the start of each invocation and processes user-provided questions. 2. Boundary markers: No specific delimiters or 'ignore instructions' warnings are present when interpolating learned context or user input into the prompt. 3. Capability inventory: The skill can trigger other specialized skills (e.g., /sales-customer-reviews, /sales-outscraper) and perform API operations. 4. Sanitization: There is no evidence of sanitization or validation for content appended to or read from the learnings file.
Audit Metadata