shopify-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate code snippets for Shopify API integration and authentication flows.
- [SAFE]: Instructions correctly identify security-sensitive files like
.envand mandate their exclusion from Git via.gitignoreto prevent credential exposure. - [SAFE]: All referenced Node.js packages (
@shopify/shopify-api,@shopify/shopify-app-remix,@shopify/shopify-app-express,@shopify/app-bridge-react) are official libraries from the standard registry. - [SAFE]: Placeholders are used for all API keys and tokens, avoiding the inclusion of hardcoded credentials.
Audit Metadata