faststore-storefront
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute VTEX CLI commands to synchronize CMS configurations. This includes
vtex content generate-schemaandvtex content upload-schema. A helper script,scripts/cms-sync.sh, and documentation inreferences/cms-schema-and-section-registration.mduseexpectto automate these interactive CLI commands, which is a standard practice for developer tooling. - [EXTERNAL_DOWNLOADS]: The documentation in
references/extending-graphql-with-custom-resolvers.mdprovides examples of GraphQL resolvers that perform network operations usingfetch. These examples demonstrate how to retrieve data from external services (such as the ViaCEP postal code API) and VTEX Master Data APIs, which is expected functionality for a commerce storefront. - [SAFE]: All referenced infrastructure (e.g.,
myvtex.com,vtexcommercestable.com,vtexfaststore.com) and dependencies (e.g.,@faststore/core,@faststore/ui) are official vendor resources belonging to VTEX. The skill maintains strict boundaries by prohibiting modifications to generated folders like.faststore/and enforcing the use of the framework's own APIs over direct Next.js usage.
Audit Metadata