commercetools-storefront
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes several utility scripts (
docs-search.mjs,graphql-schemata.mjs,openApi-schemata.mjs) that perform network requests todocs.commercetools.com. These endpoints provide documentation search, GraphQL SDL, and OpenAPI specifications. As these resources originate from official vendor domains, they are considered safe and are used purely for agent grounding. - [COMMAND_EXECUTION]: The skill instructs the agent to execute local Node.js scripts to gather context about the commercetools platform. These scripts are limited to read-only operations against vendor documentation APIs and do not pose a risk of unauthorized system modifications or malicious code execution.
- [SAFE]: The skill emphasizes a robust security posture by mandating that all commercetools SDK calls occur on a server tier. It provides clear guidance on managing session secrets and API credentials, ensuring they are stored in server-only environment variables and never leaked to the browser via public prefixes.
Audit Metadata