Shopify Toolkit
v7.0.0Shopify development reference — Liquid templates, Admin/Storefront API, theme architecture, OAuth, checkout extensibility, and CLI commands.
⭐ 0· 510·1 current·1 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the contents: SKILL.md and scripts/script.sh provide Shopify development reference material (Liquid, APIs, theme migration, security guidance). No unrelated binaries or credentials are requested.
Instruction Scope
Runtime instructions are limited to printing reference documentation (run scripts/script.sh with subcommands). The SKILL.md explicitly states no external API calls or credentials are required and the included shell script emits heredocs rather than performing I/O or network access.
Install Mechanism
No install spec is provided (instruction-only), so nothing is downloaded or written to disk by an installer. This is the lowest-risk model and matches the skill's purpose.
Credentials
The skill declares no required environment variables, no primary credential, and references no config paths. That aligns with a read-only documentation/reference skill.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or configuration changes. Autonomous invocation is permitted by default (normal) and not combined with other red flags.
Assessment
This skill appears to be a static Shopify development reference and is coherent with its description. Before installing, you can (1) open scripts/script.sh in full to confirm it only emits documentation (no network calls, exec, curl, wget, or reading of sensitive files), and (2) confirm SKILL.md's claim that it makes no external API calls. Because the repository file shown in the listing was truncated in the provided data, reviewing the full script locally will remove remaining uncertainty.Like a lobster shell, security has layers — review code before you run it.
latestvk979ykkc3s01ax4d1jdtbd63vx83fqpn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.