composable-commerce
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by utilizing environment variables (
process.env) for all API keys, project IDs, and secrets, preventing credential exposure. - [SAFE]: All identified external dependencies are standard, well-known libraries from trusted organizations such as AWS, Commercetools, Algolia, and Contentful.
- [SAFE]: The skill explicitly promotes resilience patterns like circuit breakers (using the
opossumlibrary) and distributed tracing (via OpenTelemetry) to maintain system stability and observability. - [SAFE]: No patterns of prompt injection, obfuscation, or unauthorized data exfiltration were detected in the instructions or code samples.
Audit Metadata