odoo-shopify-integration
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill implements a workflow that ingests untrusted data from an external source (Shopify) to interact with a business system (Odoo).
- Ingestion points: The skill handles incoming webhooks via
request.jsonin the Python examples provided inSKILL.md. - Boundary markers: There are no explicit delimiters or instructions to the agent to treat the incoming payload as untrusted data.
- Capability inventory: The skill demonstrates the use of
xmlrpc.client.ServerProxyto perform write and search operations (models.execute_kw) in an Odoo database. - Sanitization: The code snippets do not implement validation or escaping for external data fields such as
email,first_name, orskubefore passing them to the Odoo API.
Audit Metadata