sitecore-rendering-integration
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill establishes secure development patterns for CMS integration, mandating the use of specific helper utilities to normalize and sanitize external data from the Sitecore Layout Service.
- [COMMAND_EXECUTION]: References to local project scripts (e.g.,
pnpm run build:component-registry) are provided for maintaining the component registry within the development environment. These are standard local workflow commands. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for ingesting external data (Layout JSON) from Sitecore. It mitigates potential injection risks by requiring data to be processed through a typed field contract and extracted via centralized helper utilities (
SitecoreHelpers.ts), ensuring untrusted CMS content is handled through established normalization routines. - Ingestion points: Sitecore Layout Service JSON response.
- Boundary markers: Use of typed field contracts and specific helper functions.
- Capability inventory: Writing source files to the local file system at specified paths.
- Sanitization: Centralized normalization via
SitecoreHelpers.ts.
Audit Metadata