bigcommerce
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches product, order, and customer data from the official BigCommerce API (api.bigcommerce.com). This is a well-known service and the communication is essential for the skill's functionality.
- [COMMAND_EXECUTION]: Uses
curlandjqlocally to perform API requests and parse the resulting JSON data. These commands are static and do not execute untrusted input. - [PROMPT_INJECTION]: The skill ingests untrusted data from the BigCommerce API into the agent context via
curlandjq. While no explicit boundary markers are present to delimit the API output, the skill lacks dangerous capabilities likeevalor file-write, and the use ofjqprovides basic sanitization by ensuring only structured data is extracted.
Audit Metadata