shopify-category-taxonomy
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network operations against well-known Shopify Admin API domains (*.myshopify.com) for legitimate store management tasks. No sensitive local files are accessed or exfiltrated.
- [EXTERNAL_DOWNLOADS]: Recommends installing official development plugins from the Shopify GitHub organization, which is a recognized and trusted service provider.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted product data (titles, descriptions, tags) to perform classification. This surface is well-defended by instructions requiring the agent to calculate confidence scores and route ambiguous items for human review before executing any write operations.
- [COMMAND_EXECUTION]: Provides standard Shopify CLI and curl commands for administrative tasks. These commands are transparent, use standard tooling, and avoid dangerous patterns like piping remote scripts to a shell.
Audit Metadata