shopify-catalog
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill mandates fetching live documentation from external websites (shopify.dev) using tools like WebSearch and WebFetch, which introduces a potential surface for indirect prompt injection.
- Ingestion points: External API documentation URLs specified in SKILL.md.
- Boundary markers: No delimiters or instructions to ignore embedded commands are present.
- Capability inventory: The skill has access to Bash, Write, Edit, Grep, and Glob.
- Sanitization: No sanitization or validation of the fetched external content is described.
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and schemas from Shopify's official developer domain (shopify.dev). This is documented neutrally as it targets a well-known service for legitimate API reference.
Audit Metadata