shopify-payments
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to perform web searches to fetch live documentation from shopify.dev. This creates a potential for indirect prompt injection if the retrieved content contains malicious instructions designed to influence the agent.
- Ingestion points: Content retrieved from shopify.dev and general web searches via the WebSearch and WebFetch tools as specified in the 'Before writing code' section.
- Boundary markers: None. The instructions do not provide delimiters or warnings to treat external content as untrusted data or to ignore instructions embedded within the fetched text.
- Capability inventory: The skill is granted access to powerful tools including Bash, Write, Edit, Read, Grep, and Glob, which could be exploited if the agent follows malicious instructions from a web source.
- Sanitization: There are no requirements for sanitizing, validating, or filtering the content retrieved from the web before processing it.
Audit Metadata