fluentform-submission-lifecycle
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical documentation and best practices for working with the Fluent Forms submission lifecycle. The content is educational and aims to help developers implement secure hooks.
- [SAFE]: PHP code examples provided in the skill use industry-standard security practices, including data sanitization via
sanitize_text_fieldand idempotency checks to prevent duplicate side effects. - [INDIRECT_PROMPT_INJECTION]: The skill identifies that form submission data from the browser is untrusted. It documents the ingestion surface where external data enters the Fluent Forms context and provides guidance on using boundary markers like
fluentform/validation_errorsand sanitization routines (fluentFormSanitizer) to mitigate risks. This guidance is purely informational and emphasizes security best practices. - [EXTERNAL_DOWNLOADS]: The skill references official documentation and verified source paths for the Fluent Forms plugin. These references target well-known developer resources and are documented neutrally for context.
Audit Metadata