shopify-catalog-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads product fields (including free-form HTML like descriptionHtml and other text attributes) from the Shopify Admin API at runtime and feeds that retrieved store content into the agent’s LLM context during the “hypothesize” and “deep-read” steps; this is outsider-authored catalog data (not authored by the operating user), creating an indirect prompt-injection risk.