commerce-app-migrate
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs several automated shell operations to manage the migration workflow. This includes
gitcommands for branch creation and staging changes, as well asgrepandsedutilities used to safely extract environment variable names from local.envfiles without accessing their values. - [EXTERNAL_DOWNLOADS]: The skill uses
npx --yes @adobe/aio-commerce-lib-app@latest initto download and execute the official Adobe Commerce App Builder CLI tool directly from the npm registry. This is a standard initialization procedure for the framework. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local project, which serves as a potential attack surface for indirect prompt injection.
- Ingestion points: Project metadata from
package.json(specifically the description field) and content fromREADME.mdare read by the Analyzer agent. - Boundary markers: The skill does not employ specific delimiters or boundary markers when processing or rewriting these strings for the new configuration file.
- Capability inventory: The skill has the ability to write files to the filesystem, execute CLI tools via shell, and perform git operations.
- Sanitization: While the skill performs length-based rewriting of descriptions to fit schema limits, it does not implement specific sanitization to filter potential injection patterns from the ingested text.
- [DYNAMIC_EXECUTION]: The Executor agent generates new TypeScript configuration files (
app.commerce.config.ts) and scaffolds JavaScript action handlers in thesrc/directory by merging data extracted during the analysis phase with predefined templates.
Audit Metadata