headless-hydrogen
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes official and trusted tools from the Shopify ecosystem, such as the
@shopify/hydrogenframework and the Shopify CLI for deployment. - [SAFE]: Instructions for handling sensitive data, such as API tokens and session secrets, correctly advise the use of environment variables and secure platform configuration rather than hardcoding.
- [SAFE]: Code examples for data fetching implement parameterized GraphQL queries, which is a security best practice for preventing injection vulnerabilities.
- [SAFE]: All external resources, including documentation links and CDN-hosted scripts, originate from well-known and trusted Shopify domains.
Audit Metadata