shopify-theme-apps-detector

SUSPICIOUS due to transitive skill installation and untrusted-content analysis, but not malicious. The skill's capabilities mostly fit its stated Shopify research purpose, uses no credentials, and appears limited to public web scraping plus local report generation; the main risks are supply-chain trust in the external skill install path and indirect prompt injection from analyzed storefront content.