fluentcart-licensing-pro
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a protocol for processing external machine-to-machine licensing requests, which constitutes an indirect injection surface.
- Ingestion points: Public REST endpoints (check_license, activate_license, deactivate_license) that receive data from remote clients.
- Boundary markers: Usage of LicenseHelper for site URL normalization and strict product/item binding validation.
- Capability inventory: Database writes to licensing tables and protected file package delivery.
- Sanitization: Instructions to redact secrets from errors, implement abuse limits, and avoid distinguishable enumeration responses.
Audit Metadata