Starship
starship / search / airfields

Audit report

Airfields

TrustedReach : moderate

by Airnauts · Productivity · Shopify App Store

Productivity
Risk level
Trusted
Executive summary

Extend your store with CMS functionality & custom metafields

Key insights

  • ◆Built for Shopify badged app indicates Shopify-vetted performance/quality baseline
  • ◆Metafields utility app with no obvious need for sensitive write scopes
  • ◆Small review base (11) but high rating (4.9) suggests niche but stable
  • ◆Polish-based publisher Airnauts Sp. z o.o. Sp.j.; mature studio operating since at least 2018

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Extend your store with CMS functionality & custom metafields

Key insights
  • ◆Built for Shopify badged app indicates Shopify-vetted performance/quality baseline
  • ◆Metafields utility app with no obvious need for sensitive write scopes
  • ◆Small review base (11) but high rating (4.9) suggests niche but stable
  • ◆Polish-based publisher Airnauts Sp. z o.o. Sp.j.; mature studio operating since at least 2018
  • ◆No public security incidents, CVEs, or breach reports tied to publisher
  • ◆Primary domain serves via Cloudflare with HSTS enabled; valid TLS
  • ◆Privacy policy gaps: no sub-processors, no retention period, no compliance certifications listed

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_content
Low

Inferred from metafield/CMS functionality; needs to read pages/articles to attach metafield data

write_content
Medium

Inferred from CMS extension capability for pages and content; required to persist custom metafields

read_products
Low

Inferred from metafield support across product templates

write_products
Medium

Inferred from product metafield write capability

read_themes
Low

Inferred from store template integration described in app listing

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
airfields.io
TLS grade
A
HSTS
Enabled
CSP
Missing

HSTS max-age=31536000 enabled; no CSP header observed; served via Cloudflare with EU-West-1 cluster origin

Posture

Compliance & certifications

GDPR webhooks Fail
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

Privacy policy exists but does not claim any formal compliance certifications, no sub-processor list, no retention period; cross-border transfers acknowledged

Privacy policy
Track record

Publisher reputation

Publisher
Airnauts
Verified Shopify Partner
No
Years active
8
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.