shopify-product-serp-optimizer
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for Shopify integration. It manages secrets through a local .env file and includes logic to automatically add this file to .gitignore, preventing accidental credential exposure.
- [SAFE]: The network utility scripts/lib/public-fetch.mjs implements comprehensive SSRF protections. It validates destinations against private/local IP ranges and performs DNS lookups to verify addresses before fetching, effectively preventing access to internal infrastructure.
- [SAFE]: Command execution is handled securely. The script scripts/shopify-product-serp-admin.mjs uses execFile with arguments passed as an array to interact with the Shopify CLI, which prevents shell injection vulnerabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests data from external Shopify storefronts and search results. 1. Ingestion points: scripts/lib/public-fetch.mjs and fetching of product JSON/HTML. 2. Boundary markers: The Data Sandboxing rule in SKILL.md explicitly instructs the agent to treat external content as untrusted. 3. Capability inventory: The skill uses execFile for CLI operations, fs.writeFile for report generation, and fetch for API calls. 4. Sanitization: The skill employs an escapeHtml function in scripts/shopify-product-serp-admin.mjs to sanitize data before including it in the HTML report deliverable. Given these mitigations, the risk is negligible.
Audit Metadata