configurator-workflow
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads and executes the
@saleor/configuratorpackage from the NPM registry viapnpm dlx. This is the vendor's official tool for store configuration and represents the intended functionality of the skill. - [COMMAND_EXECUTION]: Invokes several shell commands to manage store configurations, including
pnpm dlx,jq, and file operations (ls,cat). The workflow is designed with safety gates, such as explicit validation and diff/plan review steps prior to execution. - [SAFE]: Credentials for the Saleor API (
SALEOR_TOKEN) are managed through environment variables or.env.localfiles. The skill correctly instructs users on these secure practices rather than using hardcoded secrets.
Audit Metadata