wow-api-professions

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill describes functions that ingest untrusted game data (such as crafting order notes or recipe descriptions) which could contain instructions aimed at the agent.
  • Ingestion points: C_CraftingOrders.GetCrafterOrders and C_TradeSkillUI.GetRecipeDescription as listed in SKILL.md.
  • Boundary markers: Not present; the documentation does not suggest using delimiters to separate data from instructions.
  • Capability inventory: The skill provides the ability to perform game actions like C_TradeSkillUI.CraftRecipe and C_CraftingOrders.PlaceNewOrder.
  • Sanitization: No sanitization methods are provided for processing external game strings.
  • [SAFE]: The content is a legitimate documentation reference for World of Warcraft Patch 12.0.0 APIs. All code snippets are benign Lua examples, and the referenced source (warcraft.wiki.gg) is a well-known community resource.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 10:23 PM