The Agent Skills Directory

[SAFE]: The skill serves as a security-conscious developer guide for the JetEngine Data Stores module. It explicitly warns developers about the limitations of various storage types, noting that signals from cookies, local storage, and anonymous AJAX requests are user-controlled and should not be used for authentication or authorization.
[INDIRECT_PROMPT_INJECTION]: While the skill describes mechanisms for handling untrusted browser data (AJAX, cookies), it provides necessary mitigation strategies.
Ingestion points: The documentation identifies AJAX handlers, browser cookies, and local storage as entry points for user-controlled data.
Boundary markers: It defines a clear "anonymous AJAX trust boundary" and instructs developers to validate item eligibility in companion logic.
Capability inventory: The skill demonstrates how to mutate database state (user-meta, custom tables) and perform queries based on stored IDs.
Sanitization: The instructions specifically mandate that developers must "normalize IDs at your boundary" and "sanitize both store slug and item shape" to prevent abuse.
[DYNAMIC_EXECUTION]: Code examples showing the registration of custom store types use static file paths (e.g., require_once __DIR__ . '/src/class-my-plugin-store.php'), which follows standard safe WordPress development practices.
[COMMAND_EXECUTION]: No unauthorized command execution patterns were found. The skill uses backticks for code formatting only and does not utilize dynamic context injection syntax.

je-data-stores