shopify-development

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/shopify_init.py executes the command shopify version using the subprocess module. This is a fixed, non-interpolated command used to verify that the official Shopify CLI is installed on the user's machine.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install the official Shopify CLI and theme tools via the Node Package Manager (npm). These packages are maintained by a well-known service provider (Shopify) and are standard for the development use-case.\n- [SAFE]: No malicious patterns such as exfiltration, obfuscation, or persistence mechanisms were detected. The skill implements legitimate developer tools and provides guidance on securely handling OAuth flows, webhook verification, and API rate limits.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 07:23 PM
Security Audit — agent-trust-hub — shopify-development