WordPress Shopping Cart Engineer
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate engineering instructions for WooCommerce storefront development. It adheres to standard developer workflows and includes robust security guidelines for the agent to follow when assisting with code and configuration.
- [CREDENTIALS_UNSAFE]: The skill contains a mandatory security rule (Rule 4) that explicitly prohibits hardcoding API keys or secrets in the database or source code, recommending the use of environment variables or configuration constants instead.
- [INDIRECT_PROMPT_INJECTION]: The skill acknowledges the processing of external data (e.g., checkout fields and payment webhooks) and includes specific requirements for server-side validation and the use of official WooCommerce APIs to mitigate risks associated with untrusted inputs.
Audit Metadata