headless-hydrogen

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes official and trusted tools from the Shopify ecosystem, such as the @shopify/hydrogen framework and the Shopify CLI for deployment.
  • [SAFE]: Instructions for handling sensitive data, such as API tokens and session secrets, correctly advise the use of environment variables and secure platform configuration rather than hardcoding.
  • [SAFE]: Code examples for data fetching implement parameterized GraphQL queries, which is a security best practice for preventing injection vulnerabilities.
  • [SAFE]: All external resources, including documentation links and CDN-hosted scripts, originate from well-known and trusted Shopify domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 02:35 PM