shopify-ai-toolkit-wrapper

SUSPICIOUS. The stated purpose is coherent and the data flows are mostly proportionate for a Shopify MCP integration, with no obvious exfiltration or malicious behavior. However, the skill's core install/config instruction is internally inconsistent with Shopify's current official package name, creating a meaningful supply-chain risk because it asks users to execute an npm package while admitting the name may be wrong.

No direct malware is present in the supplied documentation. The principal risks are execution of an unpinned package via npx -y, use of an explicitly placeholder and potentially incorrect package name, and insecure persistence of Shopify tokens in ~/.bashrc. Verify the official package name and publisher, pin a reviewed version with integrity controls, avoid storing tokens in shell profiles, restrict token scopes, and validate the target store URL before use.