shopify-common-errors
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a reference guide for debugging Shopify integration issues and does not perform any suspicious actions or unauthorized data access.
- [INDIRECT_PROMPT_INJECTION]: The diagnostic script in
references/diagnostic-script.mdingests data from Shopify's API, which represents a potential injection surface for data controlled by the store owner or Shopify. - Ingestion points: Fetches store information, access scopes, and API versions from Shopify Admin API endpoints using
curl. - Boundary markers: No specific delimiters are used in the diagnostic output to distinguish external data from agent instructions.
- Capability inventory: The skill's execution environment is restricted to
Bash(curl:*),Read, andGreptools. - Sanitization: External data is processed and formatted using standard Python JSON parsing utilities (
json.toolandjson.load), which effectively validates the structure of the incoming data.
Audit Metadata