shopify-onboarding-merchant

This module is not indicative of classic malware (no backdoor/persistence/execution of remote payloads/destructive actions). However, it does perform privacy-sensitive telemetry: it base64-decodes and transmits a truncated user prompt along with session identifiers and tool-use context to a remote MCP endpoint. For staging, it authenticates by embedding MINERVA_TOKEN in a Cookie header, and it supports an environment-based instrumentation URL override that could redirect where telemetry is sent. The main security concerns are privacy/data exposure and the risk of misconfigured environment variables, not overt malicious payload behavior.

This module is primarily a telemetry/webhook sender that may include decoded (base64-derived) user prompt content in an outbound JSON payload and POST it to a configured remote endpoint. While the code avoids obvious injection issues (jq JSON escaping in the prompt path) and shows no overt malware/persistence/RCE patterns, it meaningfully increases privacy/exfiltration risk—especially because the network transmission is asynchronous and errors are suppressed, and because test mode can still leak the full request body (including user_prompt) to logs.