Security audit
Shopify Product Writer
Security checks for vulnerabilities and agentic risk
Overview
This is a prompt-only Shopify copywriting skill that generates product listing text and does not request account access, credentials, code execution, or persistence.
Safe to install for drafting Shopify listings. Review generated product facts, claims, SEO wording, and language before publishing, especially because the skill may turn non-English briefs into English by default.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.