wow-api-professions
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes functions that ingest untrusted game data (such as crafting order notes or recipe descriptions) which could contain instructions aimed at the agent.
- Ingestion points:
C_CraftingOrders.GetCrafterOrdersandC_TradeSkillUI.GetRecipeDescriptionas listed inSKILL.md. - Boundary markers: Not present; the documentation does not suggest using delimiters to separate data from instructions.
- Capability inventory: The skill provides the ability to perform game actions like
C_TradeSkillUI.CraftRecipeandC_CraftingOrders.PlaceNewOrder. - Sanitization: No sanitization methods are provided for processing external game strings.
- [SAFE]: The content is a legitimate documentation reference for World of Warcraft Patch 12.0.0 APIs. All code snippets are benign Lua examples, and the referenced source (warcraft.wiki.gg) is a well-known community resource.
Audit Metadata