vtex-io-service-configuration-apps
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a standard pattern for service applications to ingest structured configuration data from external configuration apps.
- Ingestion points: Data is received through the ctx.vtex.settings runtime context, as described in SKILL.md.
- Boundary markers: The guidelines require the implementation of configuration/schema.json to define and validate the structure of the ingested data.
- Capability inventory: The documented examples show the ingested data being used to perform network operations, such as calling external APIs via ctx.clients.
- Sanitization: The instructions emphasize that service handlers should cast or validate the runtime settings against the expected schema and apply consistent defaults.
Audit Metadata