shopify-expert
Fail
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONMETADATA_POISONINGINDIRECT_PROMPT_INJECTIONSAFE
Full Analysis
- [METADATA_POISONING]: The main SKILL.md file has been flagged by file reputation scanners as malicious (FileRepMalware), indicating it may contain hidden malicious payloads or patterns.\n- [EXTERNAL_DOWNLOADS]: The skill's official documentation link (https://jeffallan.github.io/claude-skills/skills/platform/shopify-expert/) is flagged as blacklisted by automated reputation scanners.\n- [REMOTE_CODE_EXECUTION]: A code snippet in 'references/performance-optimization.md' demonstrates how to dynamically inject and execute an external script from 'https://third-party.com/widget.js', which is identified as a malicious botnet-associated URL.\n- [COMMAND_EXECUTION]: The skill provides extensive instructions for executing powerful shell commands via the Shopify CLI and NPM, which increases the risk of malicious orchestration given the confirmed malware detection.\n- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates an attack surface for indirect prompt injection by ingesting untrusted external data.\n
- Ingestion points: Shopify Webhook routes (app/routes/webhooks.tsx) and Storefront API responses (references/storefront-api.md).\n
- Boundary markers: No delimiters or protective instructions are used in the code examples to isolate external content.\n
- Capability inventory: Includes the ability to execute CLI commands, perform Admin API mutations, and make network requests.\n
- Sanitization: No sanitization or validation logic is present in the examples for handling external data.\n- [SAFE]: The skill correctly demonstrates best practices for credential management by using environment variables (process.env) and explicitly advising against hardcoding API keys in theme code.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 3 malicious URL(s) - DO NOT USE
Audit Metadata