shopify-yourskill
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill provides explicit instructions on how to handle sensitive API tokens securely using environment variables (
export SHOPIFY_ACCESS_TOKEN) rather than hardcoding them or saving them to disk. - [EXTERNAL_DOWNLOADS]: The skill references the installation of the official
Shopify-AI-Toolkitvia the Claude plugin marketplace. These are references to a well-known service and represent standard extension of the agent's capabilities. - [COMMAND_EXECUTION]: Includes standard development commands such as
curlfor API testing andshopifyCLI commands for authentication. These are restricted to the official Shopify Admin API endpoints and follow the intended purpose of the skill. - [DATA_EXFILTRATION]: All network operations are directed towards Shopify's official domains (
myshopify.com) and are used for legitimate store management tasks. There are no patterns suggesting unauthorized data transfer to third-party servers.
Audit Metadata