SkillTriage

@shopify/dev-mcp MCP server

npm:@shopify/dev-mcp

Caution

Low-impact capabilities worth knowing about before installing.

Why

Contains invisible or obfuscated characters. in README.md
Contains instructions placed where the agent reads them indirectly. in dist/data/mcp-instructions/admin.md
Changes AI rules or configuration files. in dist/data/mcp-instructions/functions.md

Scanned version: 1.17.0
Scan date: 2026-10-26
Analysis revision: e5f556c4112718a0
Integrity: sha512 verified sha512-DpjtJAbIyFFhesWpFFj6fGEIzMLKvz+sHuqes0eJPF42qsIXTkfFimVyOPvi6AsS+pjiy5+yO/GjFnXgZQAX3g==
Listed in: npm registry search
Licence: ISC

Automated static analysis by MoorAI's open-source engine. A verdict describes what the package's code can do, not the intent of its authors. Report a mistake →