shopify-functions
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation, configuration examples, and code snippets for creating Shopify Functions in Rust and JavaScript.
- [COMMAND_EXECUTION]: The shell commands provided (e.g.,
shopify app generate extension,shopify app deploy) are standard commands for the Shopify CLI and do not contain malicious payloads or argument injections. - [DATA_EXFILTRATION]: No network exfiltration patterns or sensitive data access were detected. The provided code operates strictly on input and output schemas provided by the Shopify environment.
- [OBFUSCATION]: No obfuscated code, hidden characters, or encoded strings were identified in the instructions or code samples.
- [DYNAMIC_EXECUTION]: The build commands specified in the configuration (e.g.,
cargo wasi build) are standard for WebAssembly extension development and do not execute untrusted or dynamically generated code at runtime. - [EXTERNAL_DOWNLOADS]: All external references point to official documentation at
shopify.dev, which is a well-known and trusted service.
Audit Metadata