Security audit
Shopify Directory
Security checks across malware telemetry and agentic risk
Overview
This is a directory-style shopping skill that routes users to listed Lobster category pages and keeps purchases on merchant Shopify checkouts.
Reasonable to install if you want help discovering Shopify merchants by category. The main thing to watch is that the agent will consult live Lobster category pages whose instructions may change; do not provide payment details to the skill, and complete purchases only on the selected merchant's native Shopify checkout.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.