shopify

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Shopify integration fetches store orders, products, and customer details via the Shopify Admin API, where order notes, product descriptions, and customer names can contain outsider-authored free text ingested into the agent's runtime context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The installation instructions use git clone from GitHub, representing a common unofficial operational dependency.