pp-shopify
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
shopify-pp-cliand MCP server from the author's GitHub repository and NPM registry usinggo installandnpx. - [COMMAND_EXECUTION]: The skill executes shell commands to install and run the CLI tool for Shopify store operations.
- [DATA_EXFILTRATION]: The CLI tool supports a
--deliver webhook:<url>flag to POST command results to a remote endpoint. While functional, it represents a potential data exfiltration vector. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the Shopify Admin GraphQL API and uses natural language matching for commands.
- Ingestion points: Data from Shopify Admin GraphQL API retrieved via
listandgetsubcommands. - Boundary markers: None specified in the instructions for tool outputs.
- Capability inventory: Shell command execution and remote data delivery via webhooks.
- Sanitization: No specific sanitization or filtering of API data is described.
Audit Metadata