product-comparison
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats were identified. The skill provides legitimate implementation guidelines for a common e-commerce feature using standard web technologies.
- [EXTERNAL_DOWNLOADS]: The skill recommends well-known third-party applications and plugins (e.g., Comparify for Shopify, YITH for WooCommerce) as part of its platform-specific guidance. These are standard recommendations within the respective e-commerce ecosystems and do not involve automated execution of untrusted code by the agent.
- [INDIRECT_PROMPT_INJECTION]: The skill implements a UI for displaying product attributes fetched from external data sources. While this represents a standard ingestion surface for untrusted data, the capabilities are limited to client-side rendering and URL state management, posing no significant risk of exploitation.
- Ingestion points:
ProductComparisonTablecomponent (props:products,attributeGroups) andapi/comparison.js(getComparisonDatafunction). - Boundary markers: None explicitly defined in the UI components.
- Capability inventory: Client-side UI rendering and URL parameter management using
history.replaceState. - Sanitization: Attributes are rendered as text in table cells.
Audit Metadata