Webshop Action ExecutorSAFE
Create, Evaluate, and Connect AI Skills
Overview
Create, Evaluate, and Connect AI Skills
4501e739125cOBSERVED · 2026-10-12What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: webshop-action-executor description: This skill executes a specific interface action, such as clicking a button or selecting an option, within a web shopping environment. It should be triggered when a decision has been made (e.g., to choose a color or proceed to purchase). The input is the target action identifier (e.g., 'white' or 'buy now'), and the output is the corresponding formatted action command (e.g., click[white]). --- # Skill: WebShop Action Executor ## Purpose Execute a single, specific action in a WebShop environment after a decision has been made. This skill formats the action into the required command structure for the WebShop interface. ## When to Use - **Trigger:** When the agent has completed its analysis and has decided on the exact action to take (e.g., "select the white color option," "proceed to buy now"). - **Input:** A clear target identifier (string) derived from the available actions on the current page. - **Output:** A correctly formatted `click[value]` or `search[keywords]` command. ## Core Instruction 1. **Receive Input:** The skill is provided with a single `target_action` string (e.g., 'white', 'buy now', 'b08w25dbb7'). 2. **Format Output:** Immediately output the action in the exact format required by the WebShop environment:
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
4501e739125cfull audit observations/trust-audit/skill/zjunlp__webshop-action-executor.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 4501e739125c | SAFE | B | 89 | first audit |
Questions
What does the Webshop Action Executor skill do?
Create, Evaluate, and Connect AI Skills
Is Webshop Action Executor safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Webshop Action Executor access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (4501e739125c), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.