marketplace-add-extension
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- Indirect Prompt Injection Surface: The skill uses user-provided arguments to determine the directory name for new extension routes (e.g.,
app/<extension-type>/page.tsx). This introduces an ingestion point for untrusted data into file system operations. Evidence: (1) Ingestion point:$ARGUMENTSinSKILL.md; (2) Boundary markers: Absent; (3) Capability: File system writes; (4) Sanitization: Absent. - External Dependencies: The provided boilerplate templates reference the
@sitecore-marketplace-sdk/clientlibrary. This dependency is specific to the development of Sitecore Marketplace extensions and is used for interacting with the host application. - File System Interaction: The skill generates new code files within the user's project directory structure. This behavior is aligned with the skill's primary purpose of scaffolding new extension points.
Audit Metadata