shopify-admin-automated-order-tagger
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security vulnerabilities or malicious patterns were detected. The skill uses standard Shopify API operations for its primary purpose.
- [COMMAND_EXECUTION]: The skill uses the official Shopify CLI for authentication (
shopify store auth), which is a required and safe procedure for Shopify administrative tasks. - [DATA_EXFILTRATION]: Access to order data (financial status, shipping address, etc.) is consistent with the skill's stated goal of automated tagging. No evidence of unauthorized data transfer to third-party domains was found.
- [PROMPT_INJECTION]: The instructions are task-oriented and do not contain attempts to override safety protocols or extract system prompts.
- [EXTERNAL_DOWNLOADS]: No external scripts or packages are downloaded or executed. The skill relies entirely on the provided shopify-admin toolkit environment.
Audit Metadata