vtex-io-auth-tokens-and-context
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content on secure authentication practices within the VTEX IO development environment. It promotes the principle of least privilege by encouraging the use of user-specific tokens (
STORE_TOKENandADMIN_TOKEN) for user-initiated requests instead of broader application-level tokens. - [SAFE]: Contains explicit security constraints that prohibit hardcoding sensitive API credentials (
appKey,appToken) and logging raw authentication secrets. These guidelines serve to reduce the risk of credential exposure. - [SAFE]: References to external documentation and the
@vtex/apipackage are directed toward official vendor resources, representing standard development tools for the platform.
Audit Metadata