skills/shopify/shopify-ai-toolkit/shopify-merchant-onboarding/Socket

shopify-merchant-onboarding

Warn

Audited by Socket on Apr 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose fits Shopify onboarding, but this local skill is mostly a stub that delegates execution to mutable remote instructions. Because the agent must fetch and exactly follow external SKILL.md files, the main risk is transitive trust and unreviewed remote behavior rather than confirmed malicious intent.

Confidence: 83%Severity: 62%

Audit Metadata

Analyzed At

Apr 13, 2026, 04:13 PM

Package URL

pkg:socket/skills-sh/Shopify%2Fshopify-ai-toolkit%2Fshopify-merchant-onboarding%2F@6f6b4ccd87dfee73b79b6487899739afeb10155e