shopify-app-bridge
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The skill provides instructions to load the App Bridge library from 'https://cdn.shopify.com/shopifycloud/app-bridge.js'. Although this is the official distribution point for the library, Shopify is not on the explicit list of trusted external sources, warranting a LOW severity notice.
- [NO_CODE] (INFO): The skill contains only markdown documentation and does not include any executable scripts, configuration files, or binaries that could perform actions in the agent's runtime environment.
Audit Metadata