shopify-storefront-headless
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical integration guide for Shopify's public-facing APIs. All instructions and code samples are task-oriented and conform to standard development practices.- [EXTERNAL_DOWNLOADS]: The skill references the installation of
graphql-requestvia npm and project scaffolding using@shopify/create-hydrogen. These are reputable libraries, with the latter being an official package from a trusted organization (Shopify).- [CREDENTIALS_UNSAFE]: No hardcoded API keys or secrets were found. The documentation correctly advises using environment variables for both public and private Storefront tokens, following secure configuration practices.- [COMMAND_EXECUTION]: Shell commands provided are limited to project initialization (npx,shopify hydrogen init) and package installation, which are appropriate for the skill's stated purpose.
Audit Metadata