vtex-io-security-boundaries
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a security-focused developer guide for VTEX IO applications. It provides high-quality guidance on input validation, sensitive data handling, and cross-account isolation.
- [PROMPT_INJECTION]: No prompt injection or instructions to bypass safety guardrails were found. The instructional language is professional and focused on development best practices.
- [OBFUSCATION]: No hidden content, encoded strings, homoglyphs, or steganographic patterns were identified in the text or documentation.
- [DATA_EXFILTRATION]: The skill does not contain any code to access sensitive environment variables, hardcoded credentials, or unauthorized network calls. The examples provided demonstrate how to prevent data exposure.
- [REMOTE_CODE_EXECUTION]: The file contains TypeScript code snippets for illustrative purposes only. No commands to download, execute remote scripts, or perform dynamic execution are present.
- [DYNAMIC_CONTEXT_INJECTION]: No use of shell execution syntax within the markdown content was found.
Audit Metadata