Magento 2 Skill

• Outcome: Review
• Latest audit: May 29, 2026, 9:30 PM
• Version:
  1.3.1

Overview

This Magento store-management skill is coherent, but it deserves Review because it can make real production store changes, process invoices, delete products, and expose customer data if used carelessly.

Install only if you intend to let an agent operate a Magento or Adobe Commerce store. Use a dedicated least-privilege Magento integration token, test on staging first, require explicit confirmation before every write, delete, payment, shipment, cache flush, or custom_api POST/PUT/DELETE action, and treat reports containing customer details as sensitive.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 94% confidence
• Finding: The skill declares access to sensitive environment variables and performs authenticated network operations against a live Magento store, but the finding indicates these capabilities are not explicitly declared as permissions. That creates a governance and least-privilege gap: an agent may be allowed to use the skill without users or platforms clearly understanding it can read secrets and make privileged API calls to production systems.

VirusTotal

66/66 vendors flagged this skill as clean.