shopify-functions
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch live documentation and I/O schemas from
shopify.dev(Shopify's official developer portal) usingWebFetchandWebSearch. These are well-known, trusted sources for development information and do not represent a security risk. - [COMMAND_EXECUTION]: The instructions include standard Shopify CLI commands such as
shopify app function buildandshopify app function runfor building and testing extensions locally. These operations are aligned with the skill's primary purpose of Shopify app development. - [DATA_EXFILTRATION]: No sensitive file paths or credential patterns were identified. The network operations are limited to fetching documentation from the platform vendor.
- [PROMPT_INJECTION]: The skill body consists of technical documentation and code templates. No patterns attempting to bypass agent safety filters or override system instructions were found.
Audit Metadata