skills/vodailocz/kilo-kit-mcp/shopify/Gen Agent Trust Hub

shopify

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The shopify_init.py script executes a subprocess command shopify version to verify that the Shopify CLI is correctly installed on the system.
  • [DATA_EXPOSURE]: The EnvLoader class in scripts/shopify_init.py facilitates project setup by searching for .env files in the current skill directory and up to two parent directories to automatically load API credentials and store domains.
  • [SAFE]: The skill documents and provides code examples for security best practices, such as HMAC signature verification for webhooks, CSRF prevention in OAuth flows, and the importance of using environment variables for sensitive secrets.
  • [EXTERNAL_DOWNLOADS]: The skill references official installation commands for well-known Shopify development tools, including the Shopify CLI and associated React UI component libraries from official registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 02:33 PM