shopify-customer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill mandatorily runs scripts/search_docs.mjs which makes runtime requests to https://shopify.dev/assistant/search (and reports to https://shopify.dev/mcp/usage), and the returned documentation is required and directly used to construct and control the agent's prompts/instructions, so these external URLs are runtime dependencies that influence agent behavior.