fluentform-feed-integration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a framework for processing and transmitting form submission data to external services.\n
- Ingestion points: External data is ingested through the
$formData,$entry, and$feed['processedValues']variables within the integration'snotifymethod as described in SKILL.md and references/integration-contract.md.\n - Boundary markers: While the skill advises validation and type checking, it does not mandate the use of strict boundary delimiters when interpolating user data into remote API requests or database operations.\n
- Capability inventory: The integration manager scripts are designed to perform network communication with external APIs and write operation results to the WordPress database.\n
- Sanitization: The documentation includes clear instructions for input sanitization (e.g., using
sanitize_email), validating data types after smart-code expansion, and the redaction of sensitive diagnostics to prevent data leakage.
Audit Metadata