deco-apps-vtex-review
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a development guide and audit checklist for maintaining a specific e-commerce integration. The instructions and code provided are consistent with the stated purpose of fixing VTEX authentication and session issues.
- [COMMAND_EXECUTION]: The skill includes shell commands for auditing code (e.g.,
rg,npx tsc) and project setup (e.g.,bun link). These are standard development tools and are used appropriately within the context of the guide. - [EXTERNAL_DOWNLOADS]: The skill mentions executing a script from the
@decocms/blocks-clipackage usingbunx. As this package belongs to the skill's own organization, it represents legitimate vendor functionality. - [DATA_EXFILTRATION]: Analysis of the cookie propagation logic (e.g.,
vtexFetchWithCookies,buildAuthCookieHeader) confirms these are standard implementations for managing VTEX sessions and authentication tokens between the server and the browser. No unauthorized data exfiltration patterns were identified.
Audit Metadata