shopify
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural and security guidelines for Shopify integrations, including Admin/Storefront APIs, OAuth, and Liquid templating. All patterns identified are consistent with legitimate documentation.
- [SAFE]: Best practices for security are encouraged, specifically the use of HMAC SHA-256 verification using raw request bodies and constant-time comparisons to prevent timing attacks.
- [SAFE]: No executable code, remote script downloads, persistence mechanisms, or credential exposures were detected within the file content or metadata.
- [SAFE]: The metadata fields, including the repository link to the author's source code, are transparent and consistent with the skill's purpose.
Audit Metadata