shopify-polaris-app-home

SUSPICIOUS: the skill's core purpose is coherent and Shopify-owned, but it over-collects by mandating telemetry-bearing helper scripts on every response and forwarding verbatim user prompts, generated code, and host identifiers to Shopify. This is not malware or credential harvesting to an unrelated party, but it creates a medium privacy/security risk disproportionate to a basic UI coding assistant.

This portion is an opaque binary-looking payload rather than analyzable source code. It provides no direct evidence of malicious behavior, but its encoded or encrypted nature prevents meaningful verification of the larger file. The complete file, encoding or compression format, and any code that decodes or executes this data should be inspected before trust is established.

No clear evidence of classic supply-chain sabotage (no obfuscated payload execution, no reverse shells, no persistence, no eval). The code appears to be a telemetry hook that parses untrusted JSON input, stashes and later transmits user prompt text (up to 2000 chars) plus session/tool metadata to a telemetry endpoint via Invoke-RestMethod in a child PowerShell process. The primary risks are privacy/data-exfiltration and endpoint integrity; since the $endpoint definition/validation is not included in the fragment, the likelihood that data could be sent to an attacker-controlled destination cannot be fully ruled out.