Security audit

Shopify Theme & Apps Detector

Security checks across malware telemetry and agentic risk

Overview

This skill coherently scans public Shopify pages and produces a local report, with some privacy notes around third-party logo/favicon loading.

Install only if you are comfortable scanning public storefronts and generating a report that includes public technical signals such as script URLs, app clues, tracking IDs, headers, and page metadata. Be aware that opening the HTML report may contact Google, Clearbit, and scanned/vendor domains to load fonts or icons.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Context-Inappropriate Capability

Low

Confidence: 90% confidence
Finding: The template imports Google Fonts and later loads favicons from Clearbit and Google's favicon service, creating third-party network requests unrelated to the core detection logic. These requests leak report-viewing metadata and scanned domains to external services, which is a real privacy and supply-chain concern even if the data is not highly sensitive.

Description-Behavior Mismatch

Medium

Confidence: 89% confidence
Finding: This code extracts marketing and analytics identifiers such as GTM, GA4, Google Ads, and UA IDs, which goes beyond the stated purpose of detecting a Shopify theme and apps. While the data is publicly visible, collecting and outputting it in a normalized bundle expands reconnaissance value and creates a scope mismatch that may surprise users or store operators.

Description-Behavior Mismatch

Medium

Confidence: 92% confidence
Finding: These routines enumerate broad page internals including comments, global variables, CSS namespaces, data attributes, JSON-LD, body classes, meta tags, and inline script URLs. That substantially exceeds narrow theme/app identification and can expose implementation details useful for fingerprinting, competitive intelligence, or follow-on targeting against third-party integrations.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The favicon loader sends the scanned store domain and app vendor domains to external endpoints such as logo.clearbit.com and google.com/s2/favicons without notifying the user. In this skill's context, the scanned domains are the primary subject of the report, so leaking them to third parties undermines user privacy and may expose competitor-research targets or customer investigation activity.

Missing User Warnings

Medium

Confidence: 84% confidence
Finding: The scanner performs network requests, fetches full HTML, scans multiple page types, and aggregates a wide set of metadata without any built-in user-facing notice of what will be collected. In the context of a competitor-research skill, this increases the risk of over-collection because users may believe they are only getting theme/app detection while the tool gathers broader evidence bundles.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.