Post-Purchase Flow

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 7:50 AM UTC
• Version: 1.1.0

Overview

This is a marketing workflow guide with no executable behavior, but users should add compliance safeguards before using its SMS, tracking, review, and customer-data recommendations.

Install only if you want advisory ecommerce post-purchase workflow guidance. Before operationalizing it, review SMS/email consent rules, privacy notices, customer-data minimization, review-platform and FTC policies, and UGC permission handling; avoid raw order or customer IDs in URLs and do not suppress legitimate negative reviews.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• System Prompt Leakage: Direct Leakage, Indirect Extraction, Tool-Based Exfiltration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (12)

Direct Prompt Extraction

High

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.

Content

Scanner excerpt · SKILL.md (reported line 19)May include surrounding context.

md

| Confirmation email timing | Sent within 60 seconds of order | Sent within 5 minutes | Delayed beyond 10 minutes or batched |
| Shipping update frequency | Key milestones (shipped, out for delivery, delivered) plus proactive delay alerts | Shipped and delivered only | Single "your order has shipped" with no tracking context |
| Review request timing | 7-14 days post-delivery based on product category | Fixed 5-day delay for all products | Same day as delivery or 30+ days later |
| Unboxing experience design | Branded insert card with QR code linking to setup guide and social sharing prompt | Generic packing slip with return instructions only | No insert material at all |
| Cross-sell/replenishment timing | Based on product consumption cycle data and customer engagement signals | Fixed 30-day delay for all products | Immediate post-purchase or no follow-up at all |
| WISMO reduction strategy | Proactive shipping updates with estimated delivery windows and delay notifications | Basic tracking link in shipment email | No tracking information provided |

Direct Prompt Extraction

High

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains instructions that could directly expose system prompts, internal rules, or hidden instructions to users or external parties.

Content

Scanner excerpt · unboxing-design-guide.md (reported line 31)May include surrounding context.

md

| Confirmation email timing | Sent within 60 seconds of order | Sent within 5 minutes | Delayed beyond 10 minutes or batched |
| Shipping update frequency | Key milestones (shipped, out for delivery, delivered) plus proactive delay alerts | Shipped and delivered only | Single "your order has shipped" with no tracking context |
| Review request timing | 7-14 days post-delivery based on product category | Fixed 5-day delay for all products | Same day as delivery or 30+ days later |
| Unboxing experience design | Branded insert card with QR code linking to setup guide and social sharing prompt | Generic packing slip with return instructions only | No insert material at all |
| Cross-sell/replenishment timing | Based on product consumption cycle data and customer engagement signals | Fixed 30-day delay for all products | Immediate post-purchase or no follow-up at all |
| WISMO reduction strategy | Proactive shipping updates with estimated delivery windows and delay notifications | Basic tracking link in shipment email | No tracking information provided |

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The skill repeatedly recommends SMS confirmations, shipping texts, and proactive customer communications, but it does not consistently foreground consent, opt-in/opt-out, data minimization, or applicable privacy/telecom rules. In a real deployment, users could implement messaging flows that violate consent requirements or mishandle customer data, creating compliance and trust risks.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The skill encourages review incentives and suggests routing negative reviews to support before public posting, which can cross into review gating or deceptive endorsement practices if implemented incorrectly. Although FTC and platform compliance is mentioned later, the operational guidance normalizes a pattern that could suppress negative feedback or bias reviews, exposing the business to policy violations and regulatory action.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 89% confidence

Finding

The guide prescribes SMS and email outreach based on customer behavior and purchase lifecycle timing, but it does not mention obtaining valid consent, honoring channel-specific opt-in rules, or complying with privacy and marketing laws. In a customer-journey skill, this omission can lead downstream users to operationalize outreach that is unlawful or privacy-invasive, especially for SMS and behavioral targeting.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The review workflow instructs teams to route 1-3 star reviews to support before public posting, but does not warn that this may suppress or delay negative feedback in a potentially deceptive way. In context, this can encourage manipulative review practices, mislead consumers about product quality, and expose the business to platform-policy or consumer-protection issues.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The template explicitly calls for SMS, shipping-event tracking, engagement telemetry, and broad customer-data use, but provides no requirement to obtain consent, disclose processing, or constrain data handling. In a post-purchase marketing workflow, this omission can lead implementers to deploy privacy-invasive messaging and tracking practices that violate user expectations or legal requirements, especially for SMS and behavioral data use.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The checklist explicitly promotes personalization using purchase history and browsing behavior, but it does not require lawful basis, consent where needed, notice, minimization, or opt-out controls. In a post-purchase marketing skill, this omission can lead implementers to deploy behavior-based profiling that violates privacy expectations or regulatory requirements, especially when combining transactional and marketing journeys.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 94% confidence

Finding

The guide recommends putting order ID or customer ID into QR-code URL parameters, which can expose identifiers in browser history, logs, analytics systems, referrer headers, and screenshots. In a post-purchase ecommerce context this creates unnecessary privacy risk and can enable correlation of customer identities and orders across systems or third parties.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The guide explicitly instructs tracking QR engagement and conversion events but does not mention notice, consent, or transparency for post-purchase behavioral tracking. This can result in undisclosed collection of customer interaction data and create privacy/compliance exposure, especially when linked to orders or identities.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

Pre-populating social content and automatically collecting UGC for marketing use without a clear, informed permission flow risks deceptive sharing practices and misuse of customer-created content. In this ecommerce skill, the behavior is more dangerous because it is framed as a frictionless conversion tactic and could lead teams to operationalize data use without adequate disclosure or rights management.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low

• Category: Not specified by scanner
• Confidence: 77% confidence

Finding

The file promotes time-sensitive SMS updates and later push notifications, both of which affect user devices and privacy expectations. Although TCPA compliance is mentioned elsewhere, the checklist does not clearly warn that these channels should be used only with explicit opt-in and careful user-facing disclosure of messaging behavior.

Content

No source excerpt is available for this finding.