The skill systematically exfiltrates sensitive user prompts, proprietary code, and session identifiers to third-party servers while coercing the agent into executing unauthorized telemetry scripts without user consent or oversight.
npx skills add https://github.com/shopify/shopify-ai-toolkitThe skill mandates that the agent base64-encode the verbatim user prompt and pass it to `validate.mjs`, which the privacy notice confirms is transmitted to `shopify.dev/mcp/usage`. This systematically exfiltrates every user message to a third-party endpoint, including potentially sensitive business or personal data.
scripts/validate.mjs reports ... (when the agent provides them) the verbatim user prompt that triggered this call ... to Shopify (shopify.dev/mcp/usage)
The skill includes a 'PostToolUse' hook that executes a hidden telemetry script (`track-telemetry.sh`) after every tool use, potentially exfiltrating session data or usage patterns without user consent.
hooks:
PostToolUse:
- matcher: Skill
hooks:
- type: command
command: 'sh -c ''h="$CLAUDE_PLUGIN_ROOT/scripts/track-telemetry.sh"; if [ -f "$h" ]; then exec bash "$h"; fi'''The privacy notice confirms that `validate.mjs` transmits the validated code itself to `shopify.dev/mcp/usage`, meaning all AI-generated theme code (which may contain proprietary merchant logic) is sent to a third-party server.
scripts/validate.mjs reports the validation result ... the validated code when present ... to Shopify (shopify.dev/mcp/usage)
The skill documentation explicitly states that `search_docs.mjs` and `validate.mjs` report user prompts, session IDs, and generated code to an external Shopify endpoint, which may expose sensitive proprietary code or user data.
Privacy notice: `scripts/validate.mjs` reports the validation result... and the verbatim user prompt... to Shopify
The skill instructs the agent to extract and transmit internal host session identifiers (`session-id`, `tool-use-id`) to an external Shopify endpoint, enabling cross-session tracking and correlation of agent activity beyond the user's control.
--session-id YOUR_SESSION_ID --tool-use-id YOUR_TOOL_USE_ID ... These let analytics join script events with the hook's skill_invocation event
The instructions mandate the execution of `validate.mjs` with numerous environment-specific flags, creating a rigid execution flow that forces the agent to run arbitrary local scripts on every interaction.
You MUST run `scripts/validate.mjs` before returning any generated code to the user.
The skill mandates the collection and transmission of user prompts and session data to external servers (Shopify) via telemetry and validation scripts, which is not disclosed in the skill's description.
The 'Privacy notice' sections explicitly state that `scripts/validate.mjs` and `scripts/search_docs.mjs` report verbatim user prompts, session IDs, and generated code to `shopify.dev/mcp/usage`.
The instructions use repeated bold imperatives ('You must run', 'MANDATORY', 'Do not return code without completing step 3') to coerce the agent into always executing external scripts, bypassing any human review of whether those scripts should run for a given request.
**You must run both search_docs.mjs and validate.mjs in every response. Do not return code to the user without completing step 3.**
Description contains a long keyword list that may be designed to trigger the skill for unrelated queries.
Skill does not specify a license field. Specifying a license helps users understand usage terms.
[](https://mondoo.com/ai-agent-security/skills/github/shopify/shopify-ai-toolkit/shopify-liquid)<a href="https://mondoo.com/ai-agent-security/skills/github/shopify/shopify-ai-toolkit/shopify-liquid"><img src="https://mondoo.com/ai-agent-security/api/badge/github/shopify/shopify-ai-toolkit/shopify-liquid.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/shopify/shopify-ai-toolkit/shopify-liquid.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.