shopify-webhooks
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external documentation from the web to guide the implementation process.
- Ingestion points: Documentation fetched from shopify.dev via WebSearch and WebFetch tools.
- Boundary markers: The instructions do not specify delimiters to separate external content from internal logic.
- Capability inventory: The skill environment allows access to Bash, Write, and Edit tools, which could potentially be directed by information found in the documentation.
- Sanitization: The skill does not implement specific filtering or sanitization of the fetched content.
Audit Metadata