shopify-admin-vendor-consolidation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s required runtime workflow queries Shopify product fields (including vendor, title, etc.) via the authenticated GraphQL products operation, and those product text values are authored by the store’s users/administrators (i.e., not the operating user’s own prompts/files), so outsider-authored free text is ingested into the LLM context for normalization/clustering.