woocommerce-subscriptions
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected in the skill's instructions, code examples, or evaluation criteria. The provided PHP snippets follow standard WooCommerce and WordPress development practices for subscription management.
- [COMMAND_EXECUTION]: The skill utilizes internal WordPress action and filter hooks to manage subscription lifecycle events. There is no evidence of arbitrary shell command execution or dangerous subprocess spawning.
- [DATA_EXFILTRATION]: No network operations, external requests, or sensitive file access patterns (e.g., SSH keys, AWS credentials) were found. Data handling is limited to local WordPress database meta and WooCommerce API calls.
- [PRIVILEGE_ESCALATION]: The code snippets demonstrate managing user access via WordPress roles (adding/removing a 'subscriber_member' role based on payment status). This is the intended functionality for a subscription plugin and does not represent an attempt to gain unauthorized administrative privileges.
Audit Metadata