The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/shopify_init.py uses subprocess.run to execute shopify version to verify the installation of the official Shopify CLI. This is a standard environment check for developer tooling.
[CREDENTIALS_UNSAFE]: The scripts/shopify_init.py script identifies and loads environment variables such as SHOPIFY_API_KEY and SHOPIFY_API_SECRET from local .env files. This behavior is used to facilitate project scaffolding and is consistent with the skill's primary purpose of initializing Shopify applications. The instructions correctly advocate for storing secrets in environment variables as a best practice.
[EXTERNAL_DOWNLOADS]: The skill references the official @shopify/cli and @shopify/theme packages from the NPM registry. These are well-known, trusted resources essential for Shopify development.
[DATA_EXFILTRATION]: While the skill interacts with external APIs via scripts/shopify_graphql.py, all network operations target standard Shopify Admin API endpoints (e.g., *.myshopify.com) and are performed using the user's provided access tokens for legitimate development tasks.

shopify-development