shopify-functions

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the bash tool to run local scripts (search_docs.mjs and the referenced validate.mjs) and the shopify CLI. These operations are intended for scaffolding extensions, building function code, and testing inputs locally during development.
  • [EXTERNAL_DOWNLOADS]: The search_docs.mjs script performs network requests to shopify.dev to retrieve documentation and examples. Since the skill is authored by Shopify and targets its official infrastructure, this is considered legitimate and safe functionality.
  • [DATA_EXFILTRATION]: The skill includes instrumentation that reports anonymized usage data (such as search queries and client versions) to Shopify's developer portal. This telemetry is common in professional developer tools and includes a documented opt-out mechanism.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 04:36 PM