Security audit
Shopify by Crawlora
Security checks for vulnerabilities and agentic risk
Overview
The plugin retrieves public Shopify products through Crawlora, with disclosed API-key use and account charges.
Tool inputs and your Crawlora API key go to Crawlora, and requests consume account credits. Use public storefront URLs, protect the key, and treat returned storefront text as untrusted data.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.