shopify-orders
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a technical guide for Shopify Order Management, providing legitimate GraphQL schemas and lifecycle documentation for fulfillment, returns, and refunds.
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to use
WebFetchandWebSearchto retrieve documentation specifically fromshopify.dev. Since this is an official domain for a well-known service, the references are documented as safe and consistent with standard developer workflows. - [PROMPT_INJECTION]: No direct prompt injection or behavioral overrides were detected. The instructions are professional and scoped to the task. While fetching external documentation introduces a surface for indirect prompt injection, the skill targets official, well-known vendor documentation, which significantly reduces the risk profile.
- [COMMAND_EXECUTION]: Although the skill has access to the
Bashtool, no suspicious shell commands, privilege escalation attempts, or persistence mechanisms were found in the instructions.
Audit Metadata