odoo-shopify-integration
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains functional code snippets for API integration between Odoo and Shopify. It utilizes well-known libraries like requests and flask for standard operations and does not contain any malicious code or hidden backdoors.\n- [PROMPT_INJECTION]: The skill implements a webhook receiver that processes external JSON data, which serves as a surface for indirect prompt injection.\n
- Ingestion points: Data is received via
request.jsonin theshopify_order_webhookfunction (SKILL.md).\n - Boundary markers: No specific delimiters are used in the code snippets.\n
- Capability inventory: The code performs database search and create operations on an Odoo instance via XML-RPC (SKILL.md).\n
- Sanitization: The skill's Best Practices section explicitly recommends validating Shopify HMAC signatures to mitigate risks from untrusted data.
Audit Metadata