jfb-action-external-api
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow for ingesting untrusted data from WordPress form submissions and interpolating those values into text templates for external API calls (e.g., LLM prompts or webhook bodies). This creates a potential surface where malicious user input could be crafted to influence downstream actions.
- Ingestion points: Data is ingested through
jet_fb_context()->get_value( $field_id )and the$requestarray in thedo_actionmethod. - Boundary markers: The skill demonstrates a macro replacement system (
%field_id%) for interpolating data into admin-defined templates, but it does not specify rigorous structural delimiting or escaping to prevent the injected data from breaking out of its context in the final request. - Capability inventory: The skill utilizes network capabilities via
wp_remote_postand modifies the persistent form state throughjet_fb_context()->update_request(). - Sanitization: The instructions explicitly recommend using standard WordPress sanitization functions (
sanitize_text_field,sanitize_email,absint) and JFB-specific tools to mitigate basic injection risks. - [EXTERNAL_DOWNLOADS]: The skill provides code patterns for interacting with external HTTP APIs using the WordPress HTTP API (
wp_remote_post). These network operations are intended for legitimate third-party service integrations (CRMs, LLMs, payment processors). The guide correctly instructs users to manage API credentials via settings tabs rather than hardcoding them and advises on SSRF protection by validating user-configurable hostnames.
Audit Metadata