shopify-store-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and ingests live, potentially user-generated content from Shopify Admin (see assets/store-template/scripts/shopify-export/** using graphql() to https://{shop}/admin/api and downloadFile() for media URLs) and instructs the agent to "treat Shopify Admin as the source of truth" so that that third-party content is read and can influence subsequent decisions/actions.