storefront-api
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions and examples for authenticating with the Shopify Storefront API using environment variables (
process.env.SHOPIFY_STOREFRONT_PRIVATE_TOKEN), which is a recommended security practice for managing secrets. - [SAFE]: All network operations described in the code examples target standard Shopify API endpoints (
https://${shopDomain}/api/2026-01/graphql.json) and are used for legitimate e-commerce functions such as product queries, cart management, and customer account access. - [SAFE]: No evidence of obfuscation, hidden content, or suspicious encoding was found in the documentation or code snippets.
- [SAFE]: The skill does not perform any unauthorized command execution, persistence mechanisms, or privilege escalation. All functionality is aligned with its stated purpose as an API integration guide.
Audit Metadata