salla-app-functions
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as an instructional router for the Salla platform, guiding developers through the process of building serverless handlers. It utilizes vendor-specific tools and official documentation.
- [SAFE]: The skill explicitly mentions that code runs in a sandboxed V8 environment with restricted access to system resources (no access to
fs,net, orchild_process), which is a positive security control. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of handlers that process untrusted data from store events (e.g.,
order.created). - Ingestion points: Untrusted data enters via the
payload.dataobject in store events. - Boundary markers: Not explicitly defined in this router skill; assumed to be handled by the platform's runtime.
- Capability inventory: Handlers can use
fetchand call the Salla Admin API. - Sanitization: Not detailed in this high-level router; developers are expected to implement validation in the handler step.
Audit Metadata