commerce-app-api-mesh
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches technical reference material and configuration guidelines from the official Adobe Commerce GitHub repository. This is used to ensure the agent has the correct context for API Mesh anatomy and CLI commands.
- [COMMAND_EXECUTION]: Instructs the agent on using the Adobe I/O CLI (
aio) to create, update, and check the status of API Mesh configurations. It also includescurlcommand templates for performing GraphQL introspection on commerce endpoints to verify schema shapes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests documentation from remote sources (
llm.txt) to expand its knowledge base. While this constitutes an ingestion of external data, the source is an official vendor repository and is intended for providing technical specifications for the mesh configuration.
Audit Metadata