shopify-policy-guardrails
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements security best practices for Shopify app development, providing templates for ESLint rules, pre-commit hooks, and CI/CD pipelines aimed at preventing secret leaks and enforcing API usage limits.
- [COMMAND_EXECUTION]: The
compliance-checker.tsscript utilizeschild_process.execSyncto perform local directory scanning usinggrep. The command string is hardcoded and does not include dynamic parameters or user-provided input. - [INDIRECT_PROMPT_INJECTION]: The skill involves reading and analyzing project files such as
shopify.app.tomland source code. The analysis is conducted via standard string matching and regular expressions; the content of these files is not interpolated into the agent's prompt, effectively mitigating injection risks.
Audit Metadata