commerce-app-storage

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install official Adobe libraries and CLI plugins, such as @adobe/aio-lib-db and @adobe/aio-cli-plugin-app-storage. These are verified resources from a trusted organization.
  • [COMMAND_EXECUTION]: The instructions involve standard development commands including npm install, npx initialization, and aio CLI operations for provisioning database resources. These are necessary for the documented purpose of setting up a Commerce app storage backend.
  • [CREDENTIALS_SAFE]: The skill explicitly discourages hardcoding secrets and provides patterns for using injected IMS tokens via @adobe/aio-commerce-lib-auth to authenticate with the database service.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing user-supplied data (such as collection names and operations) to scaffold runtime actions and configuration files. This follows a standard code-generation pattern for development tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 02:17 PM
Security Audit — agent-trust-hub — commerce-app-storage