Is zachgodsell93/shopify-admin-api safe?
Yes. zachgodsell93/shopify-admin-api is safe to install. Oathe's behavioral security audit gave the shopify-admin-api skill by zachgodsell93 a trust score of 91/100 with 4 findings, none critical or high.
https://clawhub.ai/zachgodsell93/shopify-admin-api
Is zachgodsell93/shopify-admin-api safe to install?
This skill provides comprehensive documentation for Shopify Admin API integration, enabling full store management capabilities. While the functionality is powerful and requires significant privileges, the skill contains only documentation with no executable code, shows no signs of malicious behavior, and maintains proper canary integrity.
What security issues were found in zachgodsell93/shopify-admin-api?
Category Scores
Findings (4)
MEDIUM Broad Administrative Permissions -15 ▶
The skill requests comprehensive access to Shopify store administration including orders, customers, products, inventory, financial transactions, and webhooks. While legitimate for its intended purpose, this represents significant privilege escalation.
LOW External API Communication by Design -10 ▶
The skill is designed to communicate with external Shopify APIs, which involves transmitting potentially sensitive business data over the network. This is expected behavior but represents data leaving the local environment.
LOW Network Activity During Installation -5 ▶
Installation involved connections to external services beyond the expected clawhub.ai registry, including CDN endpoints.
MEDIUM High-Privilege Functionality Risk -20 ▶
The skill provides access to critical business functions including financial transactions, customer data, and inventory management. While apparently legitimate, compromise of the associated credentials could enable significant business disruption.
Should I install zachgodsell93/shopify-admin-api?
Oathe's verdict for zachgodsell93/shopify-admin-api is SAFE with a trust score of 91/100. Recommendation: Install with caution.