shopify-catalog-cleanup

SUSPICIOUS: the skill’s capabilities mostly match its stated Shopify cleanup purpose and its main data flow goes to official Shopify endpoints, so it is not fundamentally malicious. However, it performs high-impact bulk catalog mutations, encourages installation of an additional Shopify plugin with mutable auto-updating behavior, and introduces optional telemetry/context sharing; these make it a medium-risk agent skill rather than benign.