shopify-polaris-app-home
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs search and validation queries against official Shopify infrastructure. The
scripts/search_docs.mjsandscripts/validate.mjsscripts connect tohttps://shopify.dev/to retrieve component documentation and validate code blocks. \n- [DATA_EXFILTRATION]: Verbatim user prompts and session identifiers are sent toshopify.devfor analytics and tool refinement. Telemetry hooks inscripts/track-telemetry.shandscripts/track-telemetry.ps1monitor skill activation and report data to the same endpoint. This behavior is disclosed in the privacy notices withinSKILL.mdand can be disabled via theOPT_OUT_INSTRUMENTATIONenvironment variable. \n- [SAFE]: All external communications target domains owned by the author (Shopify). The skill uses standard TypeScript services for its internal validation logic.
Audit Metadata