shopware6-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's content is entirely instructional and follows standard Shopware development patterns. It explicitly encourages secure coding practices, such as using the Data Abstraction Layer (DAL) to prevent SQL injection and utilizing RequestDataBag for structured input validation.
- [SAFE]: All external URLs and dependencies reference trusted or well-known sources, including official Shopware documentation (developer.shopware.com), GitHub for schema definitions (raw.githubusercontent.com/shopware/...), and established CDNs (unpkg.com). These references are used for legitimate development purposes like schema validation and library loading.
- [SAFE]: Command execution examples (e.g., in deployment scripts or CLI tools) are contextually appropriate for the DevOps and automation tasks described. For instance, the use of sudo for reloading PHP-FPM in a deployment script example is a standard task and does not represent an attempt at malicious privilege escalation.
- [SAFE]: No evidence of prompt injection, data exfiltration, persistence mechanisms, or obfuscation was detected. The skill uses clear, standard terminology and provides correct, modern implementations of PHP 8 attributes and Shopware 6 services.
Audit Metadata