The Agent Skills Directory

[SAFE]: The skill is a collection of integration guides and architectural patterns for commercetools Connect.
[SAFE]: The Node.js scripts (docs-search.mjs, graphql-schemata.mjs, openApi-schemata.mjs) include instrumentation logic that collects anonymized metadata.
This data includes installation IDs, host application names, and the domain portion of the developer's email address (extracted via git config).
Telemetry is sent to docs.commercetools.com, which is a vendor-owned resource.
The scripts include explicit documentation of this behavior and support an opt-out mechanism via the COMMERCETOOLS_AI_PLUGIN_TELEMETRY environment variable.
[SAFE]: Subprocess execution in the scripts is limited to calling the local git binary to retrieve configuration metadata, which does not pose a security risk in this context.
[SAFE]: Documentation includes examples of Base64 decoding for Google Cloud Pub/Sub envelopes, which is standard procedure for processing event-driven messages and does not contain malicious payloads.

commercetools-integrations