shopify-extensions
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The skill recommends installing '@shopify/cli' via npm. While this is the official tool for Shopify development, the '@shopify' organization is not present in the strict list of trusted external sources provided for this analysis.\n- [COMMAND_EXECUTION] (INFO): The guide includes standard CLI commands such as 'shopify app generate extension' and 'shopify app deploy'. These commands are necessary for the documented development process and do not exhibit suspicious behavior or excessive privilege requests.
Audit Metadata