shopify-admin-agentic-image-alt-text
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access attempts were detected. The skill uses standard Shopify administrative operations via an authorized toolkit.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes external product metadata (titles and tags) to generate alt text. * Ingestion points: Product metadata fetched from the Shopify API (SKILL.md). * Boundary markers: None present. * Capability inventory: Performs the fileUpdate mutation to write data to the store (SKILL.md). * Sanitization: No explicit validation or escaping of the fetched metadata before processing.
Audit Metadata