shopify-storefront-api
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill demonstrates best practices for Shopify Storefront API integration, including the proper separation of public and private access tokens.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the official @shopify/storefront-api-client package, which is an established library from a well-known service.
- [INDIRECT_PROMPT_INJECTION]: The skill describes an ingestion surface for remote product data from Shopify. This is a standard operational requirement for commerce applications and no malicious patterns or lack of sanitization were identified in the provided templates.
Audit Metadata