The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill interacts with external data sources (Shopify Admin API) that may contain content provided by third parties, creating a potential surface for indirect prompt injection.
Ingestion points: The skill defines numerous GraphQL queries in SKILL.md, references/app-development.md, and scripts/shopify_graphql.py to retrieve product, order, and customer records.
Boundary markers: The current implementation lacks explicit delimiters or instructions for the AI agent to ignore potential malicious prompts embedded within the retrieved data fields.
Capability inventory: The skill has file system write access and local command execution capabilities via scripts/shopify_init.py.
Sanitization: Documentation within the skill suggests best practices for sanitization, but the provided scripts do not perform automated filtering of external data before processing.
[COMMAND_EXECUTION]: The skill performs local environment checks using system commands.
Evidence: scripts/shopify_init.py utilizes the subprocess module to run shopify version. This is used to verify the presence of the required developer tooling before proceeding with project initialization.
[DYNAMIC_EXECUTION]: The skill programmatically generates project configuration files.
Evidence: scripts/shopify_init.py generates package.json, shopify.app.toml, and shopify.extension.toml based on user-provided names and environment variables. These files define scripts and configuration that are later executed by the developer or the agent.
[EXTERNAL_DOWNLOADS]: The skill references external tools from established vendors.
Evidence: The skill instructs users to install @shopify/cli and @shopify/theme using npm. These are the official tools provided by Shopify and are downloaded from the well-known npm registry.

shopify-development