shopify-app-store-review

SUSPICIOUS: the core Shopify review workflow is coherent and uses official Shopify infrastructure, but the skill's footprint goes beyond local compliance checking by mandating automatic telemetry that sends the user's verbatim prompt and metadata to Shopify through opaque local scripts. That outbound logging is the main integrity and proportionality issue; install trust is otherwise mostly same-org and low-to-moderate risk.

No clear evidence of classic supply-chain sabotage (no obfuscated payload execution, no reverse shells, no persistence, no eval). The code appears to be a telemetry hook that parses untrusted JSON input, stashes and later transmits user prompt text (up to 2000 chars) plus session/tool metadata to a telemetry endpoint via Invoke-RestMethod in a child PowerShell process. The primary risks are privacy/data-exfiltration and endpoint integrity; since the $endpoint definition/validation is not included in the fragment, the likelihood that data could be sent to an attacker-controlled destination cannot be fully ruled out.