shopify-admin-customer-timeline-export
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests untrusted data from external customer records, creating a surface for indirect prompt injection attacks.
- Ingestion points: Customer
noteandtagsfields, along with order details, are retrieved via GraphQL queries inSKILL.md. - Boundary markers: The instructions lack explicit delimiters or "ignore embedded instructions" warnings for the data being processed from the Shopify API.
- Capability inventory: The skill possesses file-write capabilities for generating CSV exports.
- Sanitization: No sanitization or escaping of external content is specified before the agent interpolates the data into its context for CSV generation.
Audit Metadata