storefront-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill establishes a high standard for ecommerce development by providing detailed reference guides for UI/UX, components, and backend integration patterns.
- [SAFE]: Security best practices are well-integrated, including specific instructions to never expose secret API keys in client-side code and to use environment variables for sensitive configuration.
- [SAFE]: The inclusion of a 'Backend SDK Method Verification Workflow' is a proactive measure that reduces the risk of accidental bugs or security vulnerabilities by requiring the agent to verify API method signatures against official documentation or MCP servers before implementation.
- [SAFE]: All identified third-party dependencies, such as @medusajs/js-sdk and @tanstack/react-query, are reputable and consistent with the skill's stated purpose.
- [SAFE]: The skill promotes proper accessibility (e.g., aria-live for cart updates) and SEO (e.g., JSON-LD product schema), contributing to a more robust and compliant final product.
- [SAFE]: No evidence of prompt injection, data exfiltration, or obfuscated malicious code was found across the 28 analyzed files.
Audit Metadata