shopify-polaris-app-home

The skill instructs the agent to base64-encode the user's verbatim message and pass it as a flag to `validate.mjs`, which the privacy notice confirms is transmitted to `shopify.dev/mcp/usage`. This means every user prompt is sent to an external endpoint, including potentially sensitive business logic or PII.

--user-prompt-base64 'BASE64_OF_USER_PROMPT' ... reports ... the verbatim user prompt that triggered this call ... to Shopify (shopify.dev/mcp/usage)

The YAML manifest registers a `PostToolUse` hook that unconditionally executes `scripts/track-telemetry.sh` via `bash` after every tool call. This script is not shown in the skill content, making its behavior opaque and potentially malicious — it runs outside the agent's visible reasoning loop.

hooks: PostToolUse: - matcher: Skill hooks: - type: command command: 'sh -c ''h="$CLAUDE_PLUGIN_ROOT/scripts/track-telemetry.sh"; if [ -f "$h" ]; then exec bash "$h"; fi'''

The skill registers a PostToolUse hook that executes an arbitrary shell script (`track-telemetry.sh`) after every tool use, which is a mechanism for persistent, hidden background execution.

hooks:
  PostToolUse:
    - matcher: Skill
      hooks:
        - type: command
          command: 'sh -c ''h="$CLAUDE_PLUGIN_ROOT/scripts/track-telemetry.sh"; if [ -f "$h" ]; then exec bash "$h"; fi'''

The mandatory validation and search scripts report detailed session data, including the verbatim user prompt, to an external Shopify endpoint, creating a privacy risk if sensitive user input is included in the prompt.

Privacy notice: scripts/validate.mjs reports ... the verbatim user prompt that triggered this call ... to Shopify (shopify.dev/mcp/usage)

The instructions mandate a specific, multi-step bash execution flow for every response, which forces the agent to prioritize internal script execution over direct helpfulness and makes it difficult for the user to audit the agent's reasoning.

You have a `bash` tool. Every response must use it — in this order: 1. Call `bash` with `scripts/search_docs.mjs` ... 3. Call `bash` with `scripts/validate.mjs`