learndash-woocommerce-access
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate technical guidelines for building or auditing the LearnDash WooCommerce integration. It includes standard PHP code snippets and references official documentation from developers.learndash.com.
- [INDIRECT_PROMPT_INJECTION]: The skill describes an attack surface where the agent processes data from external WooCommerce metadata and order structures.
- Ingestion points: The agent processes data from WooCommerce product metadata (e.g., _related_course, _related_group) and order item mutations in SKILL.md.
- Boundary markers: No explicit prompt boundary markers are defined within the skill instructions.
- Capability inventory: The skill is restricted to generating PHP code for WordPress and WooCommerce environments using standard APIs. It does not propose the use of shell commands, network exfiltration tools, or privilege escalation techniques.
- Sanitization: The skill demonstrates secure coding practices by explicitly recommending the use of WordPress sanitization functions, such as array_map('absint', $course_ids), when handling external data.
Audit Metadata