cli-tools

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to install official Shopify developer packages (@shopify/cli, @shopify/theme) using the npm package manager, which is a standard and expected source for these tools.\n- [COMMAND_EXECUTION]: The documentation covers a wide array of Shopify CLI commands for managing theme development, app creation, and linting, all of which align with the skill's stated purpose for developers.\n- [CREDENTIALS_UNSAFE]: Example configuration files for .env and .shopify-cli.yml correctly utilize placeholders like 'your-api-key' and 'your-api-secret', demonstrating a secure approach to documenting secret management.\n- [INDIRECT_PROMPT_INJECTION]: The skill involves processing development files for Shopify themes and apps; while this presents a standard data ingestion surface, the documentation does not contain instructions that would exploit this capability or bypass agent safety.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 02:15 PM