The Agent Skills Directory

[SAFE]: The skill provides legitimate templates and utility scripts designed to assist in developing Shopify apps, themes, and extensions.
[COMMAND_EXECUTION]: The scripts/shopify_init.py script uses subprocess.run to execute shopify version as a diagnostic check for the installation of the official Shopify CLI. This is a static command with no user-controlled input.
[EXTERNAL_DOWNLOADS]: The documentation and scripts reference official Shopify packages and documentation from trusted domains (shopify.com, shopify.dev) and registries (NPM).
[INDIRECT_PROMPT_INJECTION]: The scaffolding script scripts/shopify_init.py accepts interactive user input and interpolates it into project configuration files.
Ingestion points: Interactive terminal input via the prompt and select_option methods in scripts/shopify_init.py.
Boundary markers: None; inputs are directly embedded into generated .toml, .json, and .md files.
Capability inventory: Local file system writes and directory creation.
Sanitization: Inputs are stripped of whitespace using strip(), but no further sanitization or validation is performed on the content.

shopify-development