shopware-cli-docker
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the AI agent to execute project-related tasks using the
shopware-clitool. It covers operations such as running Symfony console commands, Composer scripts, managing the development environment, and interacting with databases. The skill includes explicit safety warnings, advising the agent to use--helpto inspect unfamiliar commands and to verify the target environment before performing destructive operations. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it instructs the agent to read project-specific configuration files (e.g.,
.shopware-project.yml,composer.json) and command outputs to discover available operations. However, this is standard behavior for a project management tool, and the skill provides mitigation by instructing the agent to understand expected changes and prefer read-only checks before taking action.
Audit Metadata