br-woo-routes
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as a documentation guide for developers to implement secure API endpoints. It promotes the use of strict schemas and validation to prevent common API vulnerabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting and processing untrusted external data via REST API endpoints. However, it explicitly defines robust security controls to mitigate this risk.
- Ingestion points: REST API routes for WooCommerce orders, products, customers, and coupons (e.g.,
/wp-json/myapp/v1/woo/orders). - Boundary markers: The documentation requires strict list and body validation, enforcing that unknown parameters are rejected by the parser.
- Capability inventory: The skill utilizes WooCommerce service classes (e.g.,
WooOrderService,WooCustomerService) to perform database writes and transactional operations. - Sanitization: Implements strict type enforcement, rejects unknown top-level fields, validates product existence, and requires specific user capabilities (e.g.,
manage_woocommerce,create_users) before processing requests.
Audit Metadata