shopify-admin-agentic-readiness-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow queries Shopify catalog data (products, descriptions, metafields) and optionally fetches an external audit API endpoint (audit.40rty.ai), which represent first-party tenant data and a selected domain search rather than an unmonitored outsider submission feed.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill makes an HTTP GET request to https://audit.40rty.ai/api/audit?domain= to retrieve external audit findings, which constitute an operational dependency with third-party unofficial provenance.