shopify
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official Shopify development tools (@shopify/cli and @shopify/theme) from the npm registry.- [COMMAND_EXECUTION]: Utilizes the Shopify CLI to initialize and run local development environments for theme customization.- [INDIRECT_PROMPT_INJECTION]: Processes store data such as product titles and descriptions fetched via Shopify APIs. The included Liquid templates demonstrate the use of escaping filters (e.g., | escape) for metadata, which is a recommended security practice to mitigate injection risks when rendering external content.
Audit Metadata