fluentform-entries-data
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a developer-focused reference providing patterns for interacting with the Fluent Forms API and database schema. It does not execute code or perform network operations itself.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for processing untrusted form data (Ingestion points: entries() and entry() methods in SKILL.md). It mitigates potential injection risks (Boundary markers: Acl::hasPermission checks, nonce verification) by providing a controlled capability inventory (Capabilities: form-scoped database access via fluentFormApi) and mandating proper data handling (Sanitization: use of absint() and sanitize_text_field() for user inputs).
- [DATA_EXFILTRATION]: The skill identifies that submission data may contain personal or sensitive information and instructs developers to protect it through field allowlisting and explicit permission checks before exposure via REST endpoints.
Audit Metadata