Shopify Directory

• Analyzed: May 14, 2026, 7:24 AM
• Findings: 1
• Version: 1.0.0
• Hash: fcda5a4c87cca9af167c573b3dc1dd18c90a3e814f5309285f70ba22e5869773
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill acts as a directory that instructs the agent to fetch and follow instructions from external URLs (e.g., lobsterbrew.com/skill.md). While this behavior is aligned with the stated purpose of merchant discovery, the instruction to treat external, dynamically fetched content as the 'source of truth' creates a significant risk for indirect prompt injection. The skill explicitly advises against collecting payment information, suggesting no immediate malicious intent, but the architectural pattern of fetching remote instructions is inherently risky.