shopify-storefront-graphql
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- Official Infrastructure Communication: The skill performs network requests to shopify.dev and shopifycloud.com to retrieve documentation and validate code blocks. These are trusted domains belonging to the Shopify organization.
- Telemetry Reporting: The utility scripts include instrumentation to report usage statistics to a telemetry endpoint. This behavior is disclosed in the SKILL.md and includes a configurable opt-out mechanism via environment variables.
- Indirect Prompt Injection Surface: The skill processes external data fetched during the search phase. Ingestion points: scripts/search_docs.mjs output. Boundary markers: Not explicitly defined in the script logic. Capability inventory: bash tool for script execution. Sanitization: JSON structure parsing and validation.
- Local Script Execution: The skill relies on local Node.js scripts executed through a bash tool to perform its primary logic, which is a standard pattern for advanced agent skills providing domain-specific functionality.
Audit Metadata