shopify-admin-gift-message-extraction

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill queries Shopify order fields including note and customAttributes { key, value } for each order, and those fields can contain customer-authored gift text (outsider/customer free-form content) that is then ingested into the LLM context during detection/report row construction.