shopify-developer
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill instructions or reference files.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing official development tools including
@shopify/cli,@shopify/app, and the@anthropic/shopify-dev-mcpserver. These references target well-known services and trusted organizations, posing no security risk. - [CREDENTIALS_UNSAFE]: Code examples for API authentication use standard placeholders such as
shpat_...,{api_key}, and{public_token}. The instructions correctly advocate for secure secret management via environment variables. - [OBFUSCATION]: References to Base64 encoding and decoding in the Liquid filter documentation are transparent and use benign examples (e.g., encoding the string 'hello') for educational purposes.
- [COMMAND_EXECUTION]: Command-line examples are restricted to standard development workflows, such as project initialization and deployment using the Shopify CLI.
Audit Metadata