The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The documentation in references/payment-gateway.md provides code snippets that instruct enqueuing an external JavaScript SDK from https://js.mypayment.com/v3/. This domain has been identified as malicious by security scanners.
[REMOTE_CODE_EXECUTION]: By instructing the use of wp_enqueue_script with the blacklisted source https://js.mypayment.com/v3/, the skill facilitates the execution of untrusted and harmful code within the browser context of store users.
[DATA_EXFILTRATION]: The example payment gateway and documentation in examples/payment-gateway/class-wc-gateway-example.php and references/payment-gateway.md direct API requests to https://api.mypayment.com/v1/ and https://sandbox.mypayment.com/api/v1/. These domains are blacklisted, posing a significant risk of credit card and customer data exfiltration to malicious actors.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied prompts for plugin development which are then used to interpolate code generation. It lacks explicit boundary markers in its instructions to handle untrusted user requirements, which could be exploited to generate malicious plugin logic. Capability inventory includes network operations via wp_remote_post and script enqueuing via wp_enqueue_script, providing a high-impact surface for potential injections.

woocommerce