shopify-automation
Warn
Audited by Snyk on Mar 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). This skill's SKILL.md explicitly instructs the agent to call Shopify data endpoints (e.g., SHOPIFY_GET_PRODUCTS, SHOPIFY_GET_PRODUCT, SHOPIFY_GET_ALL_CUSTOMERS and SHOPIFY_GRAPH_QL_QUERY) which ingest merchant/user-provided content from third-party Shopify stores that the agent is expected to read and act on, creating a clear avenue for untrusted user-generated content to influence actions.
Audit Metadata