shopify-developer
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Mentions the installation of official Shopify development tools, including the Shopify CLI and development plugins, from standard registries like NPM and Homebrew.
- [COMMAND_EXECUTION]: Provides instructions for using command-line tools to initialize projects, run local development servers, and deploy applications to production environments (Shopify Oxygen and Cloudflare Workers).
- [INDIRECT_PROMPT_INJECTION]: The skill describes how to process external data from the Storefront API and cart properties. It provides proactive security guidance, such as implementing HMAC verification for webhooks and sanitizing product data to prevent cross-site scripting (XSS) when rendering Liquid templates.
Audit Metadata