shopify-expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow’s runtime path ingests outsider-authored free text via Shopify webhook payloads (e.g., payload fields from an external sender) into the app’s webhook handler, which the code is expected to process/possibly act on.