theme-development
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Skeleton theme starter from Shopify's official GitHub repository using the
shopify theme initcommand. - [COMMAND_EXECUTION]: Utilizes the Shopify CLI to manage theme development workflows, including local previewing, syncing, and deployment to Shopify storefronts.
- [INDIRECT_PROMPT_INJECTION]: The skill processes Shopify theme files, such as Liquid templates and JSON configurations, which constitutes an ingestion surface for content provided by users or external sources.
- Ingestion points: Reads
.liquid,.json, and.cssfiles from the local development directory (e.g.,SKILL.md,examples/product.json). - Boundary markers: None identified; the agent's behavior is guided by the file contents.
- Capability inventory: Includes CLI operations to push, publish, and delete themes on a live store.
- Sanitization: Encourages usage of the official
shopify theme checklinter to validate theme code. - [SAFE]: All external resources and documentation links target well-known Shopify domains and public repositories.
Audit Metadata