shopify-expert
Fail
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: CRITICALPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard instructions for Shopify development using official CLI tools and APIs. It includes proactive security constraints, such as avoiding hardcoded credentials and ensuring GDPR compliance.
- [PROMPT_INJECTION]: The skill processes external data in the form of Shopify theme files and application code, which presents a surface for indirect prompt injection. This is inherent to the developer role and no malicious exploitation patterns were found.
- Ingestion points: Shopify theme files (.liquid, theme.json, sections) and custom app configuration (shopify.app.toml).
- Boundary markers: Not explicitly defined in the provided instructions.
- Capability inventory: Execution of the shopify CLI commands for theme and app management.
- Sanitization: Not explicitly specified within the skill instructions.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata