shopify-expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill clearly ingests and acts on untrusted third-party content at runtime — for example app/routes/webhooks.tsx processes incoming webhook payloads, the Post-Purchase extension fetches upsell data from an external endpoint ("https://your-app.com/api/upsell") and uses it to modify orders, and snippets/third-party-scripts.liquid dynamically loads arbitrary script URLs from settings (e.g., reviews_script_url, chat_script_url), any of which could contain attacker-controlled instructions that influence actions.