The Agent Skills Directory

Command Execution: The skill uses the bash tool to execute internal utility scripts (search_docs.mjs and validate.mjs). This is necessary for fetching developer documentation and validating that generated code meets Shopify's backend requirements.
Network Communication: The documentation utility connects to official Shopify domains (shopify.dev, shop.dev) to retrieve context and report tool usage. This instrumentation is disclosed in the skill's instructions, and a mechanism for opting out via environment variables is provided.
Environment Access: The provided scripts access environment variables to manage configuration and authentication for internal staging environments. This represents standard development practice for professional tooling and does not involve the use of hardcoded secrets.
Context Ingestion: The skill processes external information and user input to generate code, which presents a surface for indirect prompt injection. The instructions include specific guidance to search for component names rather than full prompts to help maintain context security.

shopify-functions