shopify-store-manager
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The catalog.mjs and fs.mjs scripts use the fetch API to download media files from Shopify-provided URLs. These files are saved to the local media/ directories within the workspace.
- [COMMAND_EXECUTION]: The init-store-workspace.sh script executes shell commands (mkdir, cp, cat) to set up the local repository structure and copy template scripts.
- [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by fetching and storing product/collection metadata.
- Ingestion points: catalog.mjs and metadata.mjs fetch data from the Shopify Admin GraphQL API.
- Boundary markers: None (data is stored in raw JSON format).
- Capability inventory: Filesystem write access (fs.mjs), network requests (api.mjs), and script execution (init-store-workspace.sh).
- Sanitization: fs.mjs implements regex-based sanitization in sanitizeFilename and safeSegment to prevent path traversal.
Audit Metadata