skills/niccos-shopify-workspace/shopify-cursor-skills/app-shopify-app-api-patterns/Gen Agent Trust Hub
app-shopify-app-api-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code templates for common architectural patterns in Shopify Remix applications.
- [SAFE]: Every code example demonstrating data access or mutation includes mandatory authentication using
authenticate.admin(request)orauthenticate.webhook(request), which is the standard security protocol for Shopify apps. - [SAFE]: The templates explicitly demonstrate and recommend resource ownership validation by filtering database queries with the authenticated session's shop domain (
session.shop). - [SAFE]: The skill includes explicit security warnings against 'mass assignment' vulnerabilities, demonstrating how to whitelist specific fields from request bodies before performing database updates.
- [SAFE]: No patterns associated with obfuscation, remote code execution, credential harvesting, or malicious persistence were detected.
Audit Metadata