marketplace-add-ai
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- External Resource Fetching: The skill uses the npx shadcn utility to download configuration from marketplace-sdk.sitecorecloud.io. This is an official Sitecore domain and is a standard part of the platform's module installation process.
- Indirect Prompt Injection Surface: The skill processes user-provided content and external URLs for AI analysis, which is a potential surface for prompt injection. (1) Ingestion points: The content state and asset URLs in the references/ai-patterns.md file. (2) Boundary markers: The code snippets do not explicitly define delimiters for the user content. (3) Capability inventory: The skill is limited to fetching review data and displaying it via UI components; it does not trigger sensitive system commands or file operations based on the AI output. (4) Sanitization: Standard error handling is present, though explicit content sanitization is not demonstrated in the implementation examples.
Audit Metadata