faststore-storefront
Fail
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell script
scripts/cms-sync.shand explicit instructions inreferences/cms-schema-and-section-registration.mdthat utilize theexpectutility to automate interaction with thevtexCLI. This allows the agent to execute shell commands and provide automated responses to prompts on the user's behalf. - [EXTERNAL_DOWNLOADS]: Code examples in
references/extending-graphql-with-custom-resolvers.mddemonstrate making network requests to external endpoints, includinghttp://viacep.com.br,https://playground.vtexcommercestable.com.br, andhttps://your-api-endpoint.com. While these appear to be placeholder examples, the endpointhttps://your-api-endpoint.com/api/contactwas flagged as malicious by automated security scans.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata