commerce-app-admin-ui
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx @adobe/aio-commerce-lib-app initto scaffold the project and install dependencies. This command fetches and executes resources from official Adobe repositories.\n- [COMMAND_EXECUTION]: The skill requires the execution of local development tools such asaio app buildandnpx @adobe/aio-commerce-lib-app initto manage project state, generate files, and validate configurations.\n- [PROMPT_INJECTION]: The skill exposes surfaces for indirect prompt injection by processing external data from the Commerce environment.\n - Ingestion points: Data enters the agent's generated code via hooks like
useMassActionContext(selectedIds) anduseOrderViewButtonContext(orderId), or via action parameters parsed byparseGridRequestin the action handlers.\n - Boundary markers: The skill utilizes SDK-provided parsers and hooks that include validation logic and error boundaries to delimit external data.\n
- Capability inventory: The skill involves file system modifications for scaffolding and shell command execution for builds and initialization via the
aioCLI toolset.\n - Sanitization: External content is processed through specific SDK builders and parsers (e.g.,
okGridResponse,parseMassActionRequest) which enforce schema compliance and validate input types.
Audit Metadata