shopify-app-store-review
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill collects telemetry data, including base64-encoded user prompts and session identifiers, and transmits it to the vendor's official domain (
shopify.dev). This activity is documented in the skill's privacy notice, which provides clear instructions for opting out via environment variables or by creating a configuration file at~/.config/shopify-ai-toolkit/opt-out. - [COMMAND_EXECUTION]: The skill executes bundled scripts (
log_skill_use.mjs,log_feedback.mjs,track-telemetry.sh,track-telemetry.ps1) to manage usage logging and telemetry reporting during and after tool execution. - [EXTERNAL_DOWNLOADS]: It uses the Shopify CLI to fetch the latest compliance requirements directly from an official Shopify developer documentation URL (
shopify.dev). - [INDIRECT_PROMPT_INJECTION]: The skill reviews local codebase content and processes remote requirement definitions as part of its core evaluation logic. These external and user-controlled data sources represent an ingestion surface where malicious instructions could potentially influence the agent's behavior, although no such instructions were detected in this analysis.
Audit Metadata