shopify-yourskill

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill provides explicit instructions on how to handle sensitive API tokens securely using environment variables (export SHOPIFY_ACCESS_TOKEN) rather than hardcoding them or saving them to disk.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of the official Shopify-AI-Toolkit via the Claude plugin marketplace. These are references to a well-known service and represent standard extension of the agent's capabilities.
  • [COMMAND_EXECUTION]: Includes standard development commands such as curl for API testing and shopify CLI commands for authentication. These are restricted to the official Shopify Admin API endpoints and follow the intended purpose of the skill.
  • [DATA_EXFILTRATION]: All network operations are directed towards Shopify's official domains (myshopify.com) and are used for legitimate store management tasks. There are no patterns suggesting unauthorized data transfer to third-party servers.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 05:37 PM