shopify-barcode-generator
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the Shopify CLI and Node.js binaries to interact with the Shopify platform. Command construction uses
execFilewith validated store domains (regex-enforced), which prevents shell injection. - [EXTERNAL_DOWNLOADS]: The skill requires the Shopify CLI and Node.js runtime to be installed on the host system to function correctly. It fetches data exclusively from official Shopify API endpoints.
- [CREDENTIALS_UNSAFE]: The skill handles Shopify API credentials (Client ID and Secret) for authentication. It provides clear instructions for storing these in a private, git-ignored
.envfile and does not include any hardcoded secrets. - [DATA_EXFILTRATION]: Network communication is restricted to official Shopify domains (
myshopify.com) for the purpose of reading product data and updating variant barcodes as requested by the user. No unauthorized data transmission to third-party servers was detected.
Audit Metadata