SkillTriage

@shopify/dev-mcp MCP server

npm:@shopify/dev-mcp

Caution

Low-impact capabilities worth knowing about before installing.

Why

Contains invisible or obfuscated characters. in README.md
Contains instructions placed where the agent reads them indirectly. in dist/data/mcp-instructions/admin.md
Changes AI rules or configuration files. in dist/data/mcp-instructions/functions.md

Scanned version: 1.15.2
Scan date: 2026-09-17
Analysis revision: 7ffaa6bb9324edc9
Integrity: sha512 verified sha512-75BhANWortpxNEAtx270sG/A5qfWOw72OFvyYBkpsE4NbbRtS+BMlG97+EOqCL7WFyXD0VSN8eekfJyVZVNSUA==
Listed in: npm registry search
Licence: ISC

Automated static analysis by MoorAI's open-source engine. A verdict describes what the package's code can do, not the intent of its authors. Report a mistake →