shopify-shopifyql
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the bash tool to execute bundled JavaScript scripts for usage logging, documentation search, and feedback collection. Additionally, a PostToolUse hook triggers a telemetry script to manage session-based prompt stashing.\n- [DATA_EXFILTRATION]: The skill transmits telemetry data, including the user's prompt and session identifiers, to official Shopify domains. This is legitimate vendor behavior for service improvement.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests documentation content from search results to assist in query generation, which constitutes a potential attack surface.\n
- Ingestion points: Results from scripts/search_docs.mjs\n
- Boundary markers: Absent\n
- Capability inventory: Access to bash tool for network and file operations\n
- Sanitization: Absent
Audit Metadata