saleor-app
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a development framework and documentation guide for the Saleor ecosystem. It follows established security patterns and does not contain executable malicious code or suspicious obfuscation.
- [INDIRECT_PROMPT_INJECTION]: The skill describes an architecture for processing data from external sources, such as Saleor webhooks and third-party services like Stripe.
- Ingestion points: Webhook endpoints defined in rules/webhook-async.md and rules/webhook-sync.md ingest data from external Saleor events.
- Boundary markers: Not directly applicable to the skill instructions themselves, though the documentation defines clear payload schemas.
- Capability inventory: The patterns described enable apps to perform GraphQL mutations and write to Saleor metadata.
- Sanitization: The skill provides extensive documentation in rules/permissions-access-scopes.md on using JWT verification and permission checking to ensure that ingested data cannot be used to perform unauthorized actions.
- [EXTERNAL_DOWNLOADS]: The skill references installation commands and SDKs from official vendor sources, such as the @saleor/app-sdk package and the saleor/agent-skills repository. These are documented as standard components for building Saleor apps.
Audit Metadata