shopify-data-handling

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides educational content and implementation templates for privacy compliance. All code examples (PII redaction, database cleanup, and webhook handling) follow industry best practices for data protection.
  • [SAFE]: External references target official Shopify development documentation (shopify.dev), which is a well-known and trusted service for ecommerce development.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides code to ingest external webhook payloads from Shopify. While this is a standard application surface, the skill correctly provides PII redaction middleware to sanitize data before logging.
  • Ingestion points: Webhook handlers in references/gdpr-privacy-webhooks.md ingest external JSON payloads.
  • Boundary markers: N/A (code implementation rather than prompt instructions).
  • Capability inventory: Database read, write, and delete operations via a hypothetical database client (db) in the provided code snippets.
  • Sanitization: Includes a dedicated redactPII function using regex patterns for emails, phone numbers, and credit cards in references/data-minimization-and-pii-detection.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:48 AM