shopify-polaris-checkout-extensions

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). scripts/search_docs.mjs makes a runtime POST to https://shopify.dev/assistant/search (SHOPIFY_DEV_BASE_URL) to fetch documentation search results that the skill is required to use to drive code generation, so external content from https://shopify.dev/ can directly influence agent prompts/instructions.