wc-coupon-types-rules

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements standard and documented WooCommerce extension patterns. It uses official classes like WC_Coupon and WC_Discounts as intended by the platform.
  • [SAFE]: Input handling includes proper sanitization. For example, the code uses wc_format_coupon_code() for coupon codes and sanitize_key(wp_unslash(...)) for administrative metadata, which are standard security practices in the WordPress ecosystem.
  • [SAFE]: The documentation explicitly warns against common pitfalls such as basing calculations on mutable session data, making network requests in hot calculation loops, and accepting customer-submitted facts at checkout.
  • [SAFE]: Concurrency and race conditions in usage accounting are addressed by recommending the use of native WooCommerce tentative holds and idempotent status transitions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 07:08 PM
Security Audit — agent-trust-hub — wc-coupon-types-rules