shopify-admin-subscription-mrr-tracker
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill performs read-only operations for legitimate business reporting purposes. It does not contain any instructions to override agent behavior, bypass safety filters, or exfiltrate data to external domains.
- [NO_CODE]: The skill consists of Markdown instructions and GraphQL query definitions. It does not include any scripts, binaries, or external dependencies that could facilitate remote code execution or persistence.
- [COMMAND_EXECUTION]: The skill relies on standard Shopify CLI commands for authentication and GraphQL execution, which are appropriate for its stated purpose. There are no instances of arbitrary command injection or privilege escalation.
- [DATA_EXFILTRATION]: While the skill accesses customer PII (email addresses and names) to generate reports, this data is only stored in a local CSV file (
subscription_mrr_<date>.csv) and is not transmitted over the network to any unauthorized third-party services.
Audit Metadata