shopify-mcp-server

SUSPICIOUS. The skill’s purpose and Shopify capabilities are broadly coherent, but the trust chain is weak: it asks the agent to run an unverified third-party `shopify-mcp` package/personal repo and forwards high-value Shopify credentials into it. No direct malicious exfiltration is documented, so this is not confirmed malware, but it is a high-risk supply-chain and credential-forwarding skill.