shopify-data-handling
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and implementation templates for privacy compliance. All code examples (PII redaction, database cleanup, and webhook handling) follow industry best practices for data protection.
- [SAFE]: External references target official Shopify development documentation (
shopify.dev), which is a well-known and trusted service for ecommerce development. - [INDIRECT_PROMPT_INJECTION]: The skill provides code to ingest external webhook payloads from Shopify. While this is a standard application surface, the skill correctly provides PII redaction middleware to sanitize data before logging.
- Ingestion points: Webhook handlers in
references/gdpr-privacy-webhooks.mdingest external JSON payloads. - Boundary markers: N/A (code implementation rather than prompt instructions).
- Capability inventory: Database read, write, and delete operations via a hypothetical database client (
db) in the provided code snippets. - Sanitization: Includes a dedicated
redactPIIfunction using regex patterns for emails, phone numbers, and credit cards inreferences/data-minimization-and-pii-detection.md.
Audit Metadata