shopify-development
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill follows development best practices, such as instructing users to store credentials in environment variables and providing code for HMAC webhook verification.
- [COMMAND_EXECUTION]: The
shopify_init.pyscript utilizessubprocess.runto verify the presence of the officialshopifyCLI. This is an expected behavior for a project initialization tool. - [EXTERNAL_DOWNLOADS]: The documentation and scripts reference the official Shopify CLI and associated NPM packages, which are standard, trusted tools for building on the Shopify platform.
- [DATA_EXFILTRATION]: The
shopify_graphql.pyscript performs network requests using the standard libraryurllib.request. These requests are directed to the user-provided shop domain for legitimate API operations, with no evidence of unauthorized data transfer.
Audit Metadata