Skills
Navigate
skills/orcaqubits/agentic-commerce-skills-plugins/shopify-api-graphql/Gen Agent Trust Hub

shopify-api-graphql

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the official Shopify Python SDK to interact with the APIs.
  • Evidence: Suggests pip install ShopifyAPI for the package maintained by Shopify at github.com/Shopify/shopify_python_api.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external sources (Shopify API endpoints), which could potentially contain untrusted instructions.
  • Ingestion points: Shopify Admin API and Storefront API responses (product titles, descriptions, metafields, etc.).
  • Boundary markers: Not explicitly defined in the provided instructions.
  • Capability inventory: The skill has access to tools including Bash, Write, and Edit.
  • Sanitization: The skill does not provide specific instructions for sanitizing or escaping the data fetched from the API before processing it.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 06:33 PM