shopify
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official installation commands for the
@shopify/clitool and Polaris UI libraries. It also includes references to Shopify's public CDN for loading web components. These resources originate from Shopify, a well-known and trusted technology service provider. - [COMMAND_EXECUTION]: The documentation describes several Shopify CLI commands used for local development, theme synchronization, and app deployment. These commands are standard operations for building on the Shopify platform and are presented in an educational context.
- [SAFE]: No malicious behavior, obfuscation, or prompt injections were detected. Authentication examples properly utilize placeholders (e.g., 'your-access-token', 'SHOPIFY_API_KEY') instead of hardcoding real secrets, and the skill includes guidance on security best practices like webhook verification and minimal access scopes.
Audit Metadata