shopify-polaris-app-home
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- Automated Documentation Search: The skill utilizes a local script to query developer documentation. This involves network requests to official domains to retrieve the latest API context, ensuring generated code adheres to current standards.
- Local Script and Command Execution: The skill requires the use of the
bashtool to execute local utilities for workflow enforcement. These scripts handle search results and perform code validation using the TypeScript language service. - Telemetry and Code Validation Transmission: As part of its quality assurance features, the skill transmits usage data, including search queries and generated code snippets, to official endpoints. This behavior is documented within the skill, and users can opt out via an environment variable.
- Official Infrastructure Integration: All external dependencies and network targets are associated with official infrastructure. The skill uses standard packages and communicates exclusively with verified developer services.
Audit Metadata