wc-coupon-types-rules
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard and documented WooCommerce extension patterns. It uses official classes like
WC_CouponandWC_Discountsas intended by the platform. - [SAFE]: Input handling includes proper sanitization. For example, the code uses
wc_format_coupon_code()for coupon codes andsanitize_key(wp_unslash(...))for administrative metadata, which are standard security practices in the WordPress ecosystem. - [SAFE]: The documentation explicitly warns against common pitfalls such as basing calculations on mutable session data, making network requests in hot calculation loops, and accepting customer-submitted facts at checkout.
- [SAFE]: Concurrency and race conditions in usage accounting are addressed by recommending the use of native WooCommerce tentative holds and idempotent status transitions.
Audit Metadata