shopify-admin-split-shipment-planner

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or security risks were identified. The skill performs a documented administrative task within a restricted environment using official Shopify tools.\n- [COMMAND_EXECUTION]: The skill uses the shopify-admin and shopify-admin-execution toolkits to perform GraphQL queries and mutations. These operations are essential for the skill's purpose and require the user to have an active, authenticated Shopify CLI session with the appropriate scopes (read_orders, write_fulfillments).\n- [PROMPT_INJECTION]: The skill was analyzed for indirect injection surfaces. Ingestion points: Shopify order and variant data fetched in SKILL.md. Boundary markers: Absent. Capability inventory: Uses mutations to split fulfillment orders. Sanitization: Absent. While the skill processes external data, the risk is negligible as it handles the data as structured fields rather than instructions, and the verdict remains SAFE.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 08:01 AM