shopify-polaris
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate resource for Shopify Polaris development. No indicators of prompt injection, data exfiltration, or malicious code execution were found.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch documentation and guidelines from official Shopify domains (
polaris.shopify.com,shopify.dev). These are recognized well-known services and the references are consistent with the skill's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for ingesting untrusted data via
WebFetchandWebSearchof external documentation. However, because it targets official Shopify vendor sites for technical documentation, the risk is negligible and managed by the agent's internal safety protocols.
Audit Metadata