shopify-app-dev
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to fetch live documentation and templates from official Shopify domains using web search and fetch tools.
- Ingestion points: The agent is instructed to use
WebSearchandWebFetchto retrieve information fromshopify.devand Shopify's GitHub repositories. - Boundary markers: No specific delimiters are used to separate external documentation from skill instructions.
- Capability inventory: The skill has access to
Write,Edit, andBashtools, which could be used to implement code based on fetched data. - Sanitization: No sanitization steps are defined for processing the external documentation content.
- [EXTERNAL_DOWNLOADS]: The skill identifies official Shopify developer documentation and the Shopify GitHub organization as sources for current API patterns and templates. These are recognized, well-known services associated with the skill's primary purpose.
Audit Metadata