lightspeed-ecommerce
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches connector configuration and OpenAPI specifications from vendor domains including
unify.apideck.comandspecs.apideck.com. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external ecommerce APIs which could serve as an attack surface for indirect prompt injection.
- Ingestion points: External ecommerce data (orders, products, customers) retrieved via the Apideck Unify API.
- Boundary markers: No explicit boundary markers or delimiters are defined for processing external data.
- Capability inventory: Network access to the Apideck API for data retrieval.
- Sanitization: No specific sanitization or filtering logic is provided in the skill instructions.
Audit Metadata