shopify-apps
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard boilerplate and architectural patterns for Shopify apps using official and well-known libraries from the @shopify organization.
- [SAFE]: Sensitive data management follows best practices by utilizing environment variables (e.g., process.env.SHOPIFY_API_KEY) rather than hardcoding credentials.
- [SAFE]: The documentation includes critical security advice, specifically mandating HMAC verification for webhook endpoints to prevent unauthorized data injection.
- [SAFE]: External resources such as the App Bridge script are sourced from Shopify's official CDN (cdn.shopify.com), which is a well-known and trusted service.
Audit Metadata