shopify-development

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill follows development best practices, such as instructing users to store credentials in environment variables and providing code for HMAC webhook verification.
  • [COMMAND_EXECUTION]: The shopify_init.py script utilizes subprocess.run to verify the presence of the official shopify CLI. This is an expected behavior for a project initialization tool.
  • [EXTERNAL_DOWNLOADS]: The documentation and scripts reference the official Shopify CLI and associated NPM packages, which are standard, trusted tools for building on the Shopify platform.
  • [DATA_EXFILTRATION]: The shopify_graphql.py script performs network requests using the standard library urllib.request. These requests are directed to the user-provided shop domain for legitimate API operations, with no evidence of unauthorized data transfer.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 05:57 PM