To report a security vulnerability in this project, please open a GitHub issue with the label security. For sensitive disclosures, contact the Shopware Labs team directly via the Shopware GitHub organization.

We aim to acknowledge reports within 5 business days and will coordinate a fix and disclosure timeline with the reporter.

This section documents the security baseline for this repository, as required for legal and compliance review.

No automatic outbound network calls The SDK operates locally: it reads JSON-RPC from stdin, writes responses to stdout, and invokes jq. It makes no outbound network calls, telemetry uploads, crash reports, or update checks. CI and scripts/test-linux.sh build their test images from debian:stable-slim (a mutable tag) and alpine:3.22; CI downloads the pinned ShellCheck release tarball from GitHub and reads from — on pushes to main, writes to — the GHCR test-image cache. A scripts/test-linux.sh run with no distro argument pulls koalaman/shellcheck-alpine:v0.11.0 for its ShellCheck stage. .github/scripts/setup-bats.sh clones the pinned BATS releases from GitHub. When JQ_VERSION is set, the Dockerfiles download that upstream static jq release binary from GitHub.

No hardcoded credentials or tokens The repository contains no hardcoded API keys, tokens, passwords, or credentials. No .env files or credential files are committed.

No personal or test data in repository or git history The repository (including full git history) contains no personal data, real user data, or test data containing personally identifiable information. All content is source code, markdown documentation, JSON test fixtures, or bash scripts.

The SDK dispatches tool calls exclusively to tool_<name> bash functions that the consuming server defines. It executes no other code, bundles no third-party binaries, and makes no calls to external services. What a consumer's tool functions execute, and which services they contact, is determined solely by the consumer; Shopware Labs does not determine the technical means of any processing performed by consumer-authored tool functions.