shopware-cms-elements

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security threats or malicious patterns were detected. The skill provides legitimate architectural guidance for Shopware 6 Erlebniswelten, covering element registration, data resolvers, and storefront templates.
  • [INDIRECT_PROMPT_INJECTION]: The skill documents methods for ingesting and processing CMS configuration data within elements. Ingestion points include $slot->getFieldConfig() in PHP resolvers and element.config in JavaScript components. The provided code examples mitigate potential risks by explicitly injecting and using the HtmlSanitizer service in PHP resolvers. Capabilities are restricted to standard Data Abstraction Layer (DAL) queries and template rendering within the Shopware framework.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 07:30 AM
Security Audit — agent-trust-hub — shopware-cms-elements