Skills
skills/worldcoin/agentkit-shopify-demo/shopify-agent-discount/Gen Agent Trust Hub

shopify-agent-discount

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the 'uv' package manager installation script from https://astral.sh/uv/install.sh using a piped shell command.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to fetch the @worldcoin/agentkit-cli tool from the official npm registry for agent registration.
  • [COMMAND_EXECUTION]: The skill executes a local Python script get-coupon.py which signs authentication messages and communicates with the Worldcoin API.
  • [CREDENTIALS_UNSAFE]: The skill manages an Ethereum private key stored in a local .agent-key file. The instructions explicitly direct the agent to never display the private key to the user and only use it for local signing operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 12:52 AM