product-comparison

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security threats were identified. The skill provides legitimate implementation guidelines for a common e-commerce feature using standard web technologies.
  • [EXTERNAL_DOWNLOADS]: The skill recommends well-known third-party applications and plugins (e.g., Comparify for Shopify, YITH for WooCommerce) as part of its platform-specific guidance. These are standard recommendations within the respective e-commerce ecosystems and do not involve automated execution of untrusted code by the agent.
  • [INDIRECT_PROMPT_INJECTION]: The skill implements a UI for displaying product attributes fetched from external data sources. While this represents a standard ingestion surface for untrusted data, the capabilities are limited to client-side rendering and URL state management, posing no significant risk of exploitation.
  • Ingestion points: ProductComparisonTable component (props: products, attributeGroups) and api/comparison.js (getComparisonData function).
  • Boundary markers: None explicitly defined in the UI components.
  • Capability inventory: Client-side UI rendering and URL parameter management using history.replaceState.
  • Sanitization: Attributes are rendered as text in table cells.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 12:39 PM