commerce-ui-tools
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFENO_CODE
Full Analysis
- Architectural Reference: The skill functions as a documentation framework for building and reviewing commerce agent outputs. It specifies how tools should handle server-side enrichment and validation, ensuring that model-authored values are not rendered directly by the frontend.
- Input Sanitization: The skill identifies security-conscious practices, such as the
sanitize_suggestion_chipsfunction, which filters invisible or control characters and enforces character limits on user-facing components. - Data Provenance: The contract includes enrichment hooks designed to discard identifiers lacking proper provenance, which serves as a safeguard against displaying unverified data.
- Internal Repository Scoping: All paths and references (e.g.,
commerce_common/,shopping_agent/) point to internal project structures rather than external or untrusted sources.
Audit Metadata