commerce-app-eventing

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and installs the official vendor library @adobe/aio-commerce-lib-app to initialize the project and manage configurations.
  • [COMMAND_EXECUTION]: The skill uses the aio (Adobe I/O) CLI to manage workspace API subscriptions and build the application. These are standard operations for developing Adobe Commerce extensibility applications.
  • [SAFE]: The skill provides a template for event handler actions that process external data (params.data). While this creates an ingestion point for untrusted data (Indirect Prompt Injection surface), it is the primary intended purpose of the skill. The provided skeleton is a standard starting point for developers.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 02:17 PM
Security Audit — agent-trust-hub — commerce-app-eventing