shopware-cms-elements
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious patterns were detected. The skill provides legitimate architectural guidance for Shopware 6 Erlebniswelten, covering element registration, data resolvers, and storefront templates.
- [INDIRECT_PROMPT_INJECTION]: The skill documents methods for ingesting and processing CMS configuration data within elements. Ingestion points include
$slot->getFieldConfig()in PHP resolvers andelement.configin JavaScript components. The provided code examples mitigate potential risks by explicitly injecting and using theHtmlSanitizerservice in PHP resolvers. Capabilities are restricted to standard Data Abstraction Layer (DAL) queries and template rendering within the Shopware framework.
Audit Metadata