shopify-security

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides defensive coding practices for Shopify integration, including HMAC verification and session token validation. The code examples use crypto.timingSafeEqual to prevent timing attacks and recommend secure secrets management using environment variables.
  • [EXTERNAL_DOWNLOADS]: The skill suggests searching for documentation and implementation details on shopify.dev, which is a well-known and trusted developer platform.
  • [COMMAND_EXECUTION]: No dangerous command execution patterns were detected in the instructions or code examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 06:33 PM