shopify-reliability-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of Shopify webhooks, which represent a surface for external data to enter the application environment.
- Ingestion points: Webhook request bodies are ingested in
references/webhook-idempotency.mdand enqueued inreferences/webhook-processing-queue.md. - Boundary markers: The implementation in
references/webhook-processing-queue.mdincludes mandatory HMAC verification (verifyHmac) to ensure the authenticity and integrity of the incoming Shopify payloads. - Capability inventory: The skill utilizes network capabilities for GraphQL API calls (
shopifyQuery) and performs cache/database operations using Redis and local database connections. - Sanitization: Payload validation is enforced via HMAC signatures before any asynchronous processing or database writing occurs.
- [SAFE]: The skill demonstrates secure implementation of reliability patterns, including the use of the well-known
opossumlibrary for circuit breakers and standard queue management withbullmqandioredis.
Audit Metadata