commerce-app-business-config
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates secure configuration practices by explicitly requiring empty default values for configuration fields of type 'password', preventing the risk of hardcoded secrets or API keys being committed to source control.
- [COMMAND_EXECUTION]: The skill utilizes the official Adobe I/O CLI (
aio app build) and vendor-provided initialization scripts (npx @adobe/aio-commerce-lib-app init). These tools are standard for the Adobe Commerce development ecosystem and are used here for legitimate project management and validation purposes. - [DATA_EXPOSURE]: The skill facilitates the generation of a local encryption key (
AIO_COMMERCE_CONFIG_ENCRYPTION_KEY) within a.envfile to handle sensitive configuration values, which aligns with standard local secret management practices. - [PROMPT_INJECTION]: The skill ingests user requirements for configuration fields and generates corresponding TypeScript code. It mitigates potential injection risks by providing a strict validation schema (Step 2) for field names, types, and values to ensure the structural integrity of the generated config file.
Audit Metadata