shopify-admin-gift-message-extraction
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs read-only operations on Shopify order data to facilitate fulfillment processes. It uses authenticated Shopify CLI sessions and adheres to the requested scopes.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted customer input which constitutes an injection surface:
- Ingestion points: Shopify
order.noteandcustomAttributesfields are retrieved and scanned for keywords. - Boundary markers: No specific delimiters are used to wrap the customer-provided text during processing.
- Capability inventory: The skill is restricted to GraphQL queries and local CSV file generation. No high-risk execution capabilities (subprocess, eval, network send) are present.
- Sanitization: The skill documentation specifies decoding HTML entities for customer messages in the error handling section.
Audit Metadata