shopify-development
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/shopify_init.pyexecutes the commandshopify versionusing thesubprocessmodule. This is a fixed, non-interpolated command used to verify that the official Shopify CLI is installed on the user's machine.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install the official Shopify CLI and theme tools via the Node Package Manager (npm). These packages are maintained by a well-known service provider (Shopify) and are standard for the development use-case.\n- [SAFE]: No malicious patterns such as exfiltration, obfuscation, or persistence mechanisms were detected. The skill implements legitimate developer tools and provides guidance on securely handling OAuth flows, webhook verification, and API rate limits.
Audit Metadata