superwall-editor
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash script (
scripts/sw-editor.sh) to executecurlfor network requests andjqfor JSON parsing and construction.\n- [EXTERNAL_DOWNLOADS]: The CLI wrapper communicates with Superwall's official relay API athttps://superwall-mcp.superwall.comandhttps://superwall.comto manage browser editor sessions.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes tool definitions and paywall data received from the browser editor. This creates a surface where content within a paywall could influence agent behavior. \n - Ingestion points: Tool definitions and results fetched via
scripts/sw-editor.sh toolsandcall.\n - Boundary markers: Absent; the skill relies on the browser session as the source of truth for tool schemas.\n
- Capability inventory: The CLI performs network requests and shell operations; the agent can modify paywall HTML, styles, and logic.\n
- Sanitization: Arguments are safely embedded into JSON payloads using
jq --argjson.\n- [SAFE]: The skill implements security best practices by restricting state file permissions to the current user (chmod 600) and providing areleasecommand to securely clear session tokens and local state.
Audit Metadata