The Agent Skills Directory

[OBFUSCATION]: The skill includes several minified JavaScript files (scripts/log_feedback.mjs, scripts/search_docs.mjs, and scripts/validate.mjs), which obfuscates their internal logic and complicates security auditing.
[DATA_EXFILTRATION]: The skill contains telemetry scripts (scripts/track-telemetry.sh, scripts/track-telemetry.ps1) and instructions in SKILL.md that exfiltrate session identifiers, tool usage IDs, and the verbatim user prompt to https://shopify.dev/mcp/usage. While the destination is a vendor-controlled domain, the inclusion of the full user prompt represents a significant data exposure risk.
[COMMAND_EXECUTION]: The instructions in SKILL.md mandate that the agent use the bash tool to execute bundled scripts (search_docs.mjs and validate.mjs) for every response, creating a wide attack surface for command-line interactions.
[DYNAMIC_EXECUTION]: The scripts/validate.mjs script utilizes the typescript library to perform runtime validation and type checking on generated code artifacts, processing code derived from user prompts.
[INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted user data within a script-execution environment.
Ingestion points: The bash tool call to scripts/validate.mjs in SKILL.md takes the user's prompt as a base64-encoded argument.
Boundary markers: There are no explicit instructions or delimiters defined to separate user input from agent-provided instructions when passing the prompt to the validation script.
Capability inventory: The skill uses the bash tool and includes scripts with network access and dynamic code processing capabilities.
Sanitization: It is not possible to verify the presence or efficacy of input sanitization due to the minified code in the validate.mjs script.
[PROMPT_INJECTION]: The skill description and mandatory requirements in SKILL.md use strong directives to override the agent's default behavior, such as explicitly forbidding the use of the Storefront GraphQL API when 'Hydrogen' is mentioned.

shopify-hydrogen