fluentcart-payment-gateways
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of gateways that process untrusted external data through webhook endpoints (
handleIPN). - Ingestion points: The skill handles raw request bodies from external payment providers as documented in
SKILL.mdandreferences/gateway-contract.md. - Boundary markers: Instructions explicitly mandate verifying provider signatures and timestamps against the raw body before any data parsing or business logic occurs.
- Capability inventory: The resulting code manages order status transitions, transaction fulfillment, and subscription states within the WordPress environment.
- Sanitization: The contract requires verification of event types, account ownership, and idempotency keys to mitigate replay and manipulation risks.
- [EXTERNAL_DOWNLOADS]: The skill references an external reference implementation at
github.com/WPManageNinja/paystack-for-fluent-cart, which is the official repository of the plugin's developer.
Audit Metadata