shopware-headless-commerce
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides procedural documentation and code examples for interacting with the Shopware 6 Store API. No malicious instructions, obfuscation, or unauthorized access patterns were detected.
- [DATA_EXPOSURE]: API keys and tokens are handled correctly in documentation examples using placeholders (e.g.,
SW_ACCESS_KEY,sw-context-token) and suggesting standard session management practices (storing tokens in cookies or server-side sessions). - [INDIRECT_PROMPT_INJECTION]: While the skill involves processing user-provided data (registration, checkout, etc.), it functions as a standard API client guide. It does not provide mechanisms for the agent to execute untrusted content or bypass safety guardrails.
Audit Metadata