shopify
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The
shopify_init.pyscript executes a subprocess commandshopify versionto verify that the Shopify CLI is correctly installed on the system. - [DATA_EXPOSURE]: The
EnvLoaderclass inscripts/shopify_init.pyfacilitates project setup by searching for.envfiles in the current skill directory and up to two parent directories to automatically load API credentials and store domains. - [SAFE]: The skill documents and provides code examples for security best practices, such as HMAC signature verification for webhooks, CSRF prevention in OAuth flows, and the importance of using environment variables for sensitive secrets.
- [EXTERNAL_DOWNLOADS]: The skill references official installation commands for well-known Shopify development tools, including the Shopify CLI and associated React UI component libraries from official registries.
Audit Metadata