vtex-io-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation guide for VTEX IO developers regarding access control. It covers role-based policies (policies.json), resource-based policies (service.json), and GraphQL authorization (@auth). All instructions align with official platform security guidelines.
- [SAFE]: The guidance regarding policy precedence (Deny overrides Allow) and the necessity of using resource-based policies for user/integration access is accurate and promotes secure configuration.
- [SAFE]: All external links point to official documentation at developers.vtex.com, which is the legitimate vendor domain for the skill author.
- [SAFE]: No executable scripts, dynamic command injection patterns, or unauthorized network operations were detected in the skill instructions.
Audit Metadata