shopify-functions
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
bashtool to run local scripts (search_docs.mjsand the referencedvalidate.mjs) and theshopifyCLI. These operations are intended for scaffolding extensions, building function code, and testing inputs locally during development. - [EXTERNAL_DOWNLOADS]: The
search_docs.mjsscript performs network requests toshopify.devto retrieve documentation and examples. Since the skill is authored by Shopify and targets its official infrastructure, this is considered legitimate and safe functionality. - [DATA_EXFILTRATION]: The skill includes instrumentation that reports anonymized usage data (such as search queries and client versions) to Shopify's developer portal. This telemetry is common in professional developer tools and includes a documented opt-out mechanism.
Audit Metadata