shopify
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation and setup instructions reference the official Shopify CLI (
@shopify/cli), which is a well-known tool from a recognized vendor. These references are used for standard development environment setup. - [COMMAND_EXECUTION]: The initialization script
scripts/shopify_init.pyexecutes a local command (shopify version) to verify if the required development tools are installed. This is a legitimate prerequisite check and does not involve arbitrary command execution or untrusted input. - [DATA_EXPOSURE]: The
EnvLoaderclass inscripts/shopify_init.pysearches for Shopify-specific environment variables in.envfiles within the project hierarchy. This follows standard local development practices for secret management and does not involve exfiltration.
Audit Metadata