Skip to main content

shopify

Enables developers to build Shopify applications, extensions, and themes using APIs and UI components for enhanced e-commerce functionality.

Install this skill

or
71/100

Security score

The shopify skill was audited on Mar 8, 2026 and we found 9 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 3

Webhook reference - potential data exfiltration

SourceSKILL.md
3description: Build Shopify applications, extensions, and themes using GraphQL/REST APIs, Shopify CLI, Polaris UI components, and Liquid templating. Capabilities include app development with OAuth auth
medium line 242

Webhook reference - potential data exfiltration

SourceSKILL.md
242- Verify webhook signatures
medium line 265

Webhook reference - potential data exfiltration

SourceSKILL.md
265- **[App Development](references/app-development.md)** - OAuth, APIs, webhooks, billing
medium line 293

Webhook reference - potential data exfiltration

SourceSKILL.md
293**Webhook Not Receiving:**
medium line 294

Webhook reference - potential data exfiltration

SourceSKILL.md
294- Verify webhook URL accessible
low line 301

External URL reference

SourceSKILL.md
301- Shopify Docs: https://shopify.dev/docs
low line 302

External URL reference

SourceSKILL.md
302- GraphQL API: https://shopify.dev/docs/api/admin-graphql
low line 303

External URL reference

SourceSKILL.md
303- Shopify CLI: https://shopify.dev/docs/api/shopify-cli
low line 304

External URL reference

SourceSKILL.md
304- Polaris: https://polaris.shopify.com
Scanned on Mar 8, 2026
View Security Dashboard
Installation guide →