Webshop Attribute SelectorSAFE
Create, Evaluate, and Connect AI Skills
Overview
Create, Evaluate, and Connect AI Skills
4501e739125cOBSERVED · 2026-10-12What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
---
name: webshop-attribute-selector
description: Selects specific product attributes (e.g., flavor, size) on a product detail page to match user requirements. Triggered when a product page presents configurable options and the parsed query specifies needed values. It identifies the correct option from available clickables (e.g., 'smoked bacon' for flavor, '4 ounce (pack of 2)' for size) and executes the selection click.
---
# Instructions
## When to Use
Activate this skill when ALL of the following are true:
1. You are on a product detail page (not a search results page).
2. The observation contains configurable product options (e.g., "flavor", "size") listed as available actions.
3. The user's instruction specifies required values for one or more of these attributes (e.g., "gluten free", "4 ounce (pack of 2)", "smoked peppered bacon").
## Core Process
1. **Parse Requirements:** From the user's instruction, extract the required attribute values (e.g., target flavor, size, dietary feature).
2. **Map to Options:** Examine the list of available actions (clickables). Identify which clickable text corresponds to each required attribute value.
* Use exact or fuzzy matching (see `scripts/match_attribute.py` for logic).
* Prioritize exact matches. For dietary features like "gluten free" or "vegetarian," the product title or description may already confirm this; your goal is to select the correct flavor/size.
3. **Execute Selection:** For each identified attribute option, perform a `click[value]` action, where `value` is the exact text of the matching clickable.
4. **Finalize:** After all required attributes are selected, if a "Buy Now" or similar action is available and the instruction implies a purchase, you may proceed to click it.
## Important Notes
* Do not use this skill on search results pages. Use search actions there.
* If a required attribute cannot be matched to any available clickable, do not click. Re-evaluate the instruction or consider a different product.
* The observation may refresh after each click, showing the same page with selected options highlighted. Continue until all specified attributes are satisfied.Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
4501e739125cfull audit observations/trust-audit/skill/zjunlp__webshop-attribute-selector.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 4501e739125c | SAFE | B | 89 | first audit |
Questions
What does the Webshop Attribute Selector skill do?
Create, Evaluate, and Connect AI Skills
Is Webshop Attribute Selector safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Webshop Attribute Selector access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (4501e739125c), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.