OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Sep 5, 2026
Independent checks from skills.sh's audit partners.
The skill provides expert patterns for Shopify app development, incorporating essential security features like HMAC signature verification and environment variable management for secrets. A minor concern was identified regarding the processing of external data from Shopify webhooks and APIs without explicit sanitization in the templates, which creates a potential surface for indirect prompt injection.
Detected behaviors
No alerts
No issues
1 file scanned · No issues
1 finding · Score: 82/100