fluentcart-integrations-jobs
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies and provides guidance for handling external data ingestion surfaces common in e-commerce integrations.
- Ingestion points: Processes data from the
fluent_cart_run_order_actionsunauthenticated AJAX handler, external webhooks, and product-specific integration feeds. - Boundary markers: The skill does not provide specific delimiters for separating data from instructions but focuses on logic-level boundaries.
- Capability inventory: Includes external API communication, background job dispatch via Action Scheduler, and database interaction with the
fct_scheduled_actionstable. - Sanitization: The instructions explicitly recommend implementing
validateFeedData()for normalization and server-side verification of payment status and idempotency to mitigate unauthorized trigger risks. - [DYNAMIC_EXECUTION]: The skill describes a framework for registering dynamic execution hooks using the
fluent_cart/integration/run/{integrationKey}pattern. This is a standard architectural feature of the plugin and is documented with warnings not to dispatch hooks using raw browser-supplied data.
Audit Metadata