deco-server-functions-invoke
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural guidance and documentation for a standard developer workflow. No malicious patterns or security risks were identified.
- [COMMAND_EXECUTION]: Instructions include the execution of a local build-time generator script using
npx tsxandnpm run. These commands target internal framework packages (@decocms/blocks-cli) and are part of the standard deployment and development lifecycle for Deco storefronts. - [DYNAMIC_EXECUTION]: Describes a build-time utility (
generate-invoke.ts) that uses thets-morphlibrary to generate TypeScript bridge files. This automated code generation is a common pattern in modern web frameworks (similar to Prisma or TanStack Query) to provide type safety and is not a runtime vulnerability.
Audit Metadata