faststore-storefront

Pass

Audited by Gen Agent Trust Hub on Apr 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute VTEX CLI commands to synchronize CMS configurations. This includes vtex content generate-schema and vtex content upload-schema. A helper script, scripts/cms-sync.sh, and documentation in references/cms-schema-and-section-registration.md use expect to automate these interactive CLI commands, which is a standard practice for developer tooling.
  • [EXTERNAL_DOWNLOADS]: The documentation in references/extending-graphql-with-custom-resolvers.md provides examples of GraphQL resolvers that perform network operations using fetch. These examples demonstrate how to retrieve data from external services (such as the ViaCEP postal code API) and VTEX Master Data APIs, which is expected functionality for a commerce storefront.
  • [SAFE]: All referenced infrastructure (e.g., myvtex.com, vtexcommercestable.com, vtexfaststore.com) and dependencies (e.g., @faststore/core, @faststore/ui) are official vendor resources belonging to VTEX. The skill maintains strict boundaries by prohibiting modifications to generated folders like .faststore/ and enforcing the use of the framework's own APIs over direct Next.js usage.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 24, 2026, 05:24 PM