enable-shopify-cms
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [External Data Processing]: The skill is designed to ingest and render data from Shopify's Storefront API. While this is the primary purpose of a CMS integration, it is a common practice for developers to ensure that the rendering components (e.g.,
MarketingPageRenderer) include validation or sanitization for any externally sourced content. - [Credential Management]: The instructions specify that a Shopify Storefront API access token is required as a prerequisite. This is presented as a configuration step rather than a request to hardcode secrets, which aligns with standard security practices for managing environment variables.
- [Development Tooling]: The skill references tools such as
shopify-ai-toolkitfor validating GraphQL queries. These are standard developer tools used to ensure API compatibility and correctness during the integration process.
Audit Metadata