shopify-barcode-generator
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In the “apply” workflow, the script reads a merchant-supplied CSV file at
scripts/shopify-barcode-generator.mjs→main()→approvedRows(fs.readFileSync(args.input, "utf8")), which ingests free-text fields that the code parses and uses for Shopify mutation parameters.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata