shopify-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official packages from the Shopify and Remix organizations via standard package managers (npm/pnpm). These are well-known, trusted sources for ecommerce development.
- [COMMAND_EXECUTION]: Shell commands provided are standard Shopify CLI operations (
shopify app init,shopify app dev,shopify auth login) required for the documented development workflow. - [CREDENTIALS_UNSAFE]: The skill uses safe placeholders like
your_api_key_hereandshpat_xxxin configuration templates and example curl commands, encouraging users to manage their actual secrets in a.envfile. - [DATA_EXFILTRATION]: Network operations described, such as ngrok tunneling and GraphQL API queries, are standard components of the Shopify development ecosystem for webhook testing and API exploration.
Audit Metadata