theme-development

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the Skeleton theme starter from Shopify's official GitHub repository using the shopify theme init command.
  • [COMMAND_EXECUTION]: Utilizes the Shopify CLI to manage theme development workflows, including local previewing, syncing, and deployment to Shopify storefronts.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes Shopify theme files, such as Liquid templates and JSON configurations, which constitutes an ingestion surface for content provided by users or external sources.
  • Ingestion points: Reads .liquid, .json, and .css files from the local development directory (e.g., SKILL.md, examples/product.json).
  • Boundary markers: None identified; the agent's behavior is guided by the file contents.
  • Capability inventory: Includes CLI operations to push, publish, and delete themes on a live store.
  • Sanitization: Encourages usage of the official shopify theme check linter to validate theme code.
  • [SAFE]: All external resources and documentation links target well-known Shopify domains and public repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 02:14 PM