shopify-pos-ui
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes scripts to retrieve API documentation and component metadata from vendor-controlled domains.
- The
search_docs.mjsscript performs queries againstshopify.devto provide context-aware component information. - [DATA_EXFILTRATION]: Usage telemetry and interaction metadata are transmitted to the vendor for tool optimization.
- Verification and search scripts transmit diagnostic results and user prompts to
https://shopify.dev/mcp/usageas part of the vendor's documented instrumentation flow. - Telemetry hooks (
track-telemetry.shandtrack-telemetry.ps1) capture tool invocation events to log performance and usage patterns. - [COMMAND_EXECUTION]: The skill requires local execution of search and validation utilities to maintain high code quality.
- Instructions guide the agent to use the
bashtool to run documentation search and TypeScript-based code validation before presenting results to the user. - Telemetry scripts are executed via tool hooks to maintain background logging without interrupting the developer workflow.
Audit Metadata