shopify-graphql-reference
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- Integration with Well-Known Services: The skill references the
Shopify/shopify-ai-toolkitfor schema validation. This is a standard reference to a tool from a well-known service provider and is used as intended for inspecting API schemas. - Secure Environment Management: The guidance includes instructions for using
.env.localfor local development flags likeDEBUG_SHOPIFY. This is a recommended practice for managing environment-specific configurations without exposing sensitive data. - GraphQL Security Guardrails: The skill explicitly instructs against string interpolation for dynamic values, instead mandating the use of GraphQL variables. This is a critical security practice that prevents injection-style vulnerabilities in API queries.
- Data Handling Best Practices: The workflow emphasizes transforming raw external API responses into internal domain types, which helps maintain data integrity and provides a layer of validation between external data and application components.
Audit Metadata