shopify-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate configuration patterns for Shopify application development workflows. All instructions and scripts are consistent with the stated purpose of CI/CD integration.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill emphasizes the use of GitHub Repository Secrets for managing sensitive API keys and tokens. The instructions correctly avoid hardcoding credentials and follow secure secret management practices.
- [EXTERNAL_DOWNLOADS]: The GitHub Actions workflow performs a network request to Shopify's official administration domain (
myshopify.com) to verify API version support. This is a functional requirement for Shopify development and targets a well-known, trusted service. - [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (
gh) and Shopify CLI (npx shopify) for their intended purposes of managing secrets and deploying applications. These operations are performed within the context of the user's own repository and environment.
Audit Metadata