shopify-catalog-cleanup
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates security best practices by explicitly instructing users to store sensitive Admin API access tokens in environment variables rather than hardcoding them or saving them to disk.
- [SAFE]: The instructions implement a 'preview before mutation' doctrine, requiring users to run count and preview queries to verify the impact of a change before executing a write operation.
- [SAFE]: All external tools and dependencies, such as the Shopify CLI and the Shopify AI Toolkit, are sourced from well-known and reputable service providers.
- [SAFE]: The skill promotes non-destructive workflows by defaulting to archiving products with dated tracking tags, ensuring that bulk changes can be identified and reversed if necessary.
- [DATA_EXPOSURE_&_EXFILTRATION]: While the skill processes product descriptions which could potentially contain indirect instructions, it mitigates risk by recommending targeted regex transformations and mandatory logging of all changes to a CSV file for human diff review.
Audit Metadata