shopify-hydrogen

SUSPICIOUS. The skill is internally coherent and appears genuinely Shopify-authored, so it is not malware. However, it forces every interaction through bash-based local scripts that transmit prompt/code/metadata to Shopify, creating a meaningful privacy and operational risk disproportionate to a simple cookbook skill.