international-shipping
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidance and evaluation tasks for e-commerce developers, focusing on platform-specific configurations (Shopify, WooCommerce, BigCommerce) and custom implementations.
- [SAFE]: External service references (EasyPost, Zonos, Avalara, Global-e) are well-known industry standards for logistics and tax compliance, which is consistent with the [TRUST-SCOPE-RULE].
- [SAFE]: Coding tasks within the evaluation suite explicitly require the use of environment variables (e.g.,
process.env.EASYPOST_API_KEY,process.env.CUSTOMS_SIGNER_NAME) for sensitive configuration, preventing hardcoded credentials. - [SAFE]: The customs declaration logic includes data sanitization requirements, such as truncating descriptions to 45 characters and using generic category-level descriptions to comply with international regulations.
- [SAFE]: The screening logic for restricted items uses deterministic matching of HS code prefixes and country codes, avoiding potential prompt injection vulnerabilities associated with unstructured data processing.
- [SAFE]: The skill implements graceful error handling in duties estimation, ensuring that external API failures do not disrupt the checkout flow by falling back to a default status (DDU).
Audit Metadata