shopify-apps
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for Shopify app development, containing only standard documentation and code snippets.
- [SAFE]: External dependencies are restricted to official Shopify packages (e.g., @shopify/cli, @shopify/shopify-app-remix) and standard development tools like Prisma and Vitest.
- [SAFE]: Sensitive data management adheres to industry best practices, correctly utilizing environment variables for API keys and secrets while explicitly warning against hardcoding credentials or committing .env files.
- [SAFE]: Network operations are limited to scaffolding project structures via the official Shopify CLI and interacting with the Shopify GraphQL Admin API.
- [SAFE]: Authentication patterns utilize the official Shopify SDKs, which provide built-in security features like HMAC verification and session validation.
Audit Metadata