init-vercel-shop
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- Official CLI Execution: The skill uses
npx create-vercel-shopto scaffold new projects. This is a standard and expected pattern for modern web development project initialization. - Secure Credential Handling: The instructions correctly guide the agent to store sensitive Shopify access tokens in a
.env.localfile. It explicitly prohibits displaying tokens in the chat or asking the user to provide them directly, which aligns with security best practices for secret management. - Trusted Tooling and Plugins: The skill leverages official tools from established organizations, including Vercel and Shopify, to handle authentication and project configuration.
- Safe File Operations: It includes pre-execution checks to inspect the target directory, preventing accidental overwriting of existing files and ensuring the integrity of the generated project structure.
Audit Metadata