commerce-api-gateway
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Downloads and executes a shell script from 'router.apollo.dev' to install the Apollo Router. This is the official installation method for this well-known technology provider.
- [EXTERNAL_DOWNLOADS]: Installs the '@apollo/rover' CLI tool via the npm package registry. The skill configuration also points to several external subgraph URLs for schema federation.
- [COMMAND_EXECUTION]: Instructions include the execution of binary files and CLI tools (router, rover) to manage the gateway lifecycle and compose GraphQL supergraphs.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill describes an aggregation layer that ingests data from external commerce microservices (Catalog, Inventory, CMS) and client-supplied parameters in 'SKILL.md'.
- Boundary markers: The code snippets do not implement specific boundary markers or delimiters between the aggregated data sources.
- Capability inventory: The gateway possesses the capability to perform network requests and combine data from multiple external sources. Evidence found in 'SKILL.md'.
- Sanitization: The implementation examples focus on architectural patterns and do not explicitly demonstrate sanitization of downstream service responses before delivery to the client.
Audit Metadata