Third-party audit

Gen Agent Trust Hub

shopify-storefront-graphql · shopify/shopify-ai-toolkit

Passed
Provider summary

The skill facilitates Shopify Storefront GraphQL development by providing documentation search and code validation tools. It communicates with Shopify's official developer domains for its core functionality and for usage telemetry. The only identified risk is a standard indirect prompt injection surface common to tools that ingest external search data.

The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.

Provider
Gen Agent Trust Hub
Normalized result
pass
Risk level
NONE
Audited
May 16, 2026
Interpretation

How to use this signal

01

Confirm the source

Compare the repository, publisher, and installation command before continuing.

02

Read the content

Review SKILL.md, scripts, and allowed tools. Artificial Atlas never executes them during indexing.

03

Limit permissions

Use the narrowest possible scope and avoid broad credentials for third-party skills.