shopify-storefront-graphql

No overt malicious payload/backdoor behavior is apparent in this module. However, it performs outbound network communication and—by default—sends telemetry to a configurable MCP endpoint. That telemetry can contain truncated user prompt content and session identifiers (sourced from environment variables), and the telemetry destination can be overridden via `SHOPIFY_DEV_INSTRUMENTATION_URL` without visible allowlisting/validation. This makes the main concern an operational privacy/data-exfiltration risk rather than malware.

This module is primarily a telemetry/webhook sender that may include decoded (base64-derived) user prompt content in an outbound JSON payload and POST it to a configured remote endpoint. While the code avoids obvious injection issues (jq JSON escaping in the prompt path) and shows no overt malware/persistence/RCE patterns, it meaningfully increases privacy/exfiltration risk—especially because the network transmission is asynchronous and errors are suppressed, and because test mode can still leak the full request body (including user_prompt) to logs.