shopify-polaris-admin-extensions

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to official Shopify domains (shopify.dev, shopifycloud.com) for core functionality.
  • Fetches documentation search results from https://shopify.dev/assistant/search via scripts/search_docs.mjs.
  • Reports usage telemetry, including truncated user prompts and validated code, to https://shopify.dev/mcp/usage via scripts/validate.mjs and telemetry hooks.
  • [COMMAND_EXECUTION]: The skill instructions mandate the use of the bash tool to execute included maintenance and validation scripts.
  • Executes scripts/search_docs.mjs to retrieve component context before generating code.
  • Executes scripts/validate.mjs to perform TypeScript-based semantic validation on generated code blocks using a bundled virtual environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 09:26 AM
Security Audit — agent-trust-hub — shopify-polaris-admin-extensions