shopify-admin-cogs-completeness-audit

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is strictly read-only, utilizing GraphQL queries (productVariants and inventoryItems) without any mutation operations that could alter store data.
  • [SAFE]: No external network operations, remote script downloads, or data exfiltration patterns were detected. Data retrieved from the Shopify API is processed locally to generate a summary and a CSV report.
  • [SAFE]: The skill does not employ any obfuscation techniques, prompt injection attempts, or dynamic code execution. It adheres to standard practices for Shopify CLI-based interactions.
  • [SAFE]: There are no findings related to privilege escalation, persistence, or credential harvesting. The skill requires an existing authenticated Shopify CLI session with minimal necessary scopes (read_products, read_inventory).
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 10:05 AM
Security Audit — agent-trust-hub — shopify-admin-cogs-completeness-audit