shopify-theme-apps-detector
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Node.js script (
scripts/store-scanner.mjs) to perform the scanning logic. This script is well-structured and focuses on data collection without requesting elevated privileges. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to user-provided Shopify store URLs. It implements high-quality SSRF (Server-Side Request Forgery) protections in
scripts/public-fetch.mjs, including DNS resolution validation to block private, local, and loopback IP addresses (e.g., 127.0.0.1, 10.0.0.0/8). - [PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface by ingesting untrusted HTML from external websites. This is addressed through a mandatory evidence chain:
- Ingestion points:
scripts/store-scanner.mjsfetches HTML content from external Shopify stores. - Boundary markers:
SKILL.mddefines a 'Hard Rule' for Data Sandboxing, instructing the agent to treat crawled code strictly as static evidence and ignore any embedded command sequences. - Capability inventory: Node.js script execution, network fetch capabilities, and local filesystem write access for report generation.
- Sanitization: All extracted data is passed through an
escapeHtmlfunction before being embedded in the final HTML report, and JSON data is escaped to prevent script tag injection. - [SAFE]: The skill uses well-known and trusted external services for UI assets (Google Fonts, Clearbit, and Google Favicon service) which is considered safe practice for report generation.
Audit Metadata