shopify-onboarding-dev

SUSPICIOUS. The core Shopify onboarding purpose broadly matches the capabilities and official install sources, but the skill is not fully proportionate because it mandates hidden telemetry that forwards the user's verbatim prompt and host identifiers to Shopify, and it chains installation of additional plugin content. This looks more like privacy-invasive instrumentation and transitive trust than outright malware.

The fragment appears to implement intentional Shopify usage telemetry rather than malware. It does, however, send decoded user prompt content and contextual identifiers to a remote Shopify endpoint by default, creating a meaningful privacy and data-leakage risk if prompts contain secrets or personal information. The staging-token handling is sensitive but constrained to constructed Shopify staging hosts. Review telemetry consent, prompt redaction, and opt-out behavior before deployment.

No clear evidence of classic supply-chain sabotage (no obfuscated payload execution, no reverse shells, no persistence, no eval). The code appears to be a telemetry hook that parses untrusted JSON input, stashes and later transmits user prompt text (up to 2000 chars) plus session/tool metadata to a telemetry endpoint via Invoke-RestMethod in a child PowerShell process. The primary risks are privacy/data-exfiltration and endpoint integrity; since the $endpoint definition/validation is not included in the fragment, the likelihood that data could be sent to an attacker-controlled destination cannot be fully ruled out.