Security audit
Security checks for vulnerabilities and agentic risk
This Shopify integration needs review because its unrestricted admin tool permits destructive store changes beyond the dedicated product tools.
Use a read-only Shopify token for exploration. Before enabling writes, restrict or disable the generic admin tool and require explicit approval for each proposed change, especially deletion. Verify the configured shop hostname before supplying the token.
scripts/server.pyGeneric mutation entry point lacks an enforced approval gate
Publishing or destructive store changes can occur without verified user approval, subject to the token's API permissions.
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
)
context = ssl.create_default_context(cafile=certifi.where())
try:
with urllib.request.urlopen(request, timeout=30, context=context) as response:
raw = response.read().decode("utf-8")
parsed = json.loads(raw) if raw else {}
return parsed if isinstance(parsed, dict) else {"data": parsed}
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Authentication
The deployment harness provides a Shopify access token and shop identifier. mcporter passes them into the stdio subprocess via `mcporter.json`; the local server sends the token to Shopify as the admin API access token.
This skill does not claim a refresh-token contract for Shopify. If Shopify rejects the token, reconnect the integration so the deployment harness can provision a new access token.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Authentication
The deployment harness provides a Shopify access token and shop identifier. mcporter passes them into the stdio subprocess via `mcporter.json`; the local server sends the token to Shopify as the admin API access token.
This skill does not claim a refresh-token contract for Shopify. If Shopify rejects the token, reconnect the integration so the deployment harness can provision a new access token.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Data flow
Tool calls run locally: mcporter spawns this skill's Python MCP server as a subprocess, and that server forwards Shopify Admin API requests with the configured access token. Shopify sees the product, order, customer, and shop data referenced by each call. Use this skill for Shopify-related work only; do not pass unrelated sensitive content through these tools.
## Dependencies
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
The deployment harness provides a Shopify access token and shop identifier. mcporter passes them into the stdio subprocess via `mcporter.json`; the local server sends the token to Shopify as the admin API access token.
This skill does not claim a refresh-token contract for Shopify. If Shopify rejects the token, reconnect the integration so the deployment harness can provision a new access token.
## Data flow
Without declared permissions the skill's intent is opaque and cannot be validated.
No suspicious patterns detected.