The Agent Skills Directory

[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from an external WooCommerce environment which could contain malicious instructions.
Ingestion points: Data retrieved from the WooCommerce store via woo_orders, woo_products, and woo_customers tools is used in automated workflows.
Boundary markers: The provided templates (e.g., product_template, email_automation) do not explicitly define boundary markers or 'ignore' instructions for interpolated external data.
Capability inventory: The skill has the capability to update store data, send emails to customers, and manage coupons via the ecommerce-mcp tools.
Sanitization: There is no evidence of data sanitization or validation logic within the provided workflow configurations to prevent the execution of instructions embedded in field values like product names or customer notes.

WooCommerce Automation