shopify-api
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWNO_CODE
Full Analysis
- [NO_CODE] (SAFE): The analyzed skill consists entirely of documentation in Markdown format. There are no associated scripts, binaries, or configuration files that execute logic, which eliminates the risk of runtime attacks such as remote code execution or unauthorized command execution within this context.
- [CREDENTIALS_UNSAFE] (SAFE): The documentation describes how to authenticate with Shopify APIs (e.g., using X-Shopify-Access-Token). However, it uses safe, non-functional placeholders such as '<shpat_...>' and '<public_token>' rather than including any hardcoded, live secrets or credentials.
Audit Metadata