dev-troubleshooting

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs adding a runtime CDN script tag that loads and executes remote code (https://cdn.shopify.com/shopifycloud/app-bridge.js), which is a required runtime dependency for the App Bridge v4 migration and therefore poses an external-code execution dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes explicit Shopify Billing API operations — e.g., the appSubscriptionCreate GraphQL mutation and guidance on creating test charges/subscriptions and setting billing-related fields (distribution = "app_store"). Those are specific, purpose-built financial operations (creating charges/subscriptions), which constitute direct financial execution capability.