shopware-cli-extension-store
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shopware-cli for extension validation. This is a legitimate use of a vendor tool for its intended purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection via the processing of user-controlled files.
- Ingestion points: composer.json, config.xml, and shopware-cli output.
- Boundary markers: Absent.
- Capability inventory: shopware-cli execution and local file read access.
- Sanitization: Absent.
Audit Metadata