draft-order-cleanup
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to manage Shopify draft orders through official GraphQL APIs. It follows best practices by providing a
dry_runmode enabled by default, which allows users to preview actions before any data is permanently deleted. - [COMMAND_EXECUTION]: The skill references the use of the
shopifyCLI for authentication (shopify store auth). This is a standard and expected prerequisite for interacting with the Shopify platform and does not represent an unauthorized or suspicious execution pattern. - [DATA_EXFILTRATION]: While the skill reads order data (customer names, emails, and totals) to generate a CSV report, this behavior is transparently documented and consistent with the skill's administrative purpose. No evidence was found of data being sent to unauthorized external destinations.
- [EXTERNAL_DOWNLOADS]: The skill communicates with Shopify's GraphQL API endpoints. These are well-known, official services required for the skill to function, and no suspicious remote script downloads or third-party executions were detected.
Audit Metadata