shopify-admin-partial-refund-pattern-detector

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow queries Shopify order/refund data via the orders GraphQL operation (orders(first: 250, after: $after, query: $query) { ... refunds { note ... } }), where the ingested refunds.note and other order text are authored by Shopify/customer/staff outside the operating user, making it outsider-authored free text entering the LLM context.