etsy-tony-full-gigab2b-draft
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONMETADATA_POISONING
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external product pages and competitor listings, creating an attack surface for indirect prompt injection.
- Ingestion points: GigaB2B product pages, Etsy competitor listings, and external queue records (e.g., Feishu/Lark).
- Boundary markers: The skill does not define specific delimiters or instructions to prevent the agent from following directions potentially embedded in the scraped product data.
- Capability inventory: The skill has the ability to execute local scripts, perform browser-based network operations, and write to the local file system.
- Sanitization: There are no explicit validation or sanitization steps mentioned for the text content extracted from external sources.
- [METADATA_POISONING]: The instructions include marketing content that directs users to a specific Douyin (TikTok China) account for help and demonstrations.
- [COMMAND_EXECUTION]: The skill directs the agent to execute bundled Python scripts (
scripts/calculate_listing_price.pyandscripts/update_job_state.py) via the shell to perform its core functions.
Audit Metadata