shopify-polaris-customer-account-extensions
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Retrieves technical documentation, API schemas, and validation metadata from official Shopify domains including shopify.dev and shopifycloud.com.
- [DATA_EXFILTRATION]: Implements usage tracking that collects session metadata and verbatim user prompts, transmitting them to Shopify's telemetry service. This behavior is explicitly disclosed in the skill's privacy notices and is used for tool improvement.
- [COMMAND_EXECUTION]: Utilizes the bash tool to run internal Node.js scripts for searching documentation and validating generated UI code using a local TypeScript environment.
Audit Metadata