saleor-configurator
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and executes the @saleor/configurator package from the NPM registry. This package is the official tool provided by the vendor for managing store configurations.
- [COMMAND_EXECUTION]: The skill provides instructions for running CLI commands including deploy, introspect, and diff. These commands are used to manage store state and are executed within the user's environment.
- [INDIRECT_PROMPT_INJECTION]: The skill processes store configuration data provided via YAML files and remote API responses. 1. Ingestion points: Local config.yml file and remote Saleor GraphQL API. 2. Boundary markers: The skill does not define specific prompt delimiters for data ingestion. 3. Capability inventory: The skill utilizes CLI execution (pnpm dlx), filesystem operations, and network communication. 4. Sanitization: The underlying tool performs schema validation and pre-flight checks before executing store mutations.
Audit Metadata