returns-management

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or unauthorized data access were detected. The skill's instructions and evaluation tasks focus on standard e-commerce business logic.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the well-known shippo Node.js package for generating prepaid shipping labels. This is a legitimate dependency for the described functionality.
  • [DATA_EXFILTRATION]: No patterns of unauthorized data access or exfiltration to non-whitelisted domains were found. API keys are appropriately managed via environment variables in the provided code examples.
  • [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override agent safety guidelines or bypass behavioral constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 11:23 AM