Scanned skills
jeffallan/claude-skills shopify-expert
Checked the catalogued skill at shopify-expert.
D AI-triaged 5
D Security
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
A Permissions
A set by no findings on this axis
A Transparency
A set by no findings on this axis
5 findings
references/liquid-templating.md
references/performance-optimization.md
references/performance-optimization.md
references/performance-optimization.md
references/storefront-api.md
4 suppressed by AI triage
SKILL.md
The '..' import is a normal relative module reference within the skill, not an attempt to access system directories.
references/app-development.md
The hook is an app post‑auth callback, not an automatic package lifecycle script that runs on installation.
references/checkout-customization.md
The code is part of documentation, merely illustrating an outbound call, not actual execution.
references/checkout-customization.md
The snippet is documented example code, not malicious payload.