configurator-recipes
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation instructs the user to use
pnpm dlx @saleor/configurator, which downloads and executes the Saleor Configurator tool directly from the NPM registry. This tool is an official resource provided by the skill's authoring organization. - [COMMAND_EXECUTION]: The instructions include standard shell commands for file management (
cp) and store deployment using the configurator tool. - [INDIRECT_PROMPT_INJECTION]: The skill utilizes YAML configuration templates as inputs for the deployment process. While these are static files within the skill package, they represent a surface where modifications to the data could influence the behavior of the deployment tool.
- Ingestion points: Store configuration templates found in the
templates/directory. - Boundary markers: No explicit boundary markers or security instructions are present in the templates.
- Capability inventory: Shell command execution via the configurator CLI and local file system operations.
- Sanitization: The templates do not define input validation or sanitization routines for the configuration data.
Audit Metadata