wc-extension-upgrade-audit
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing untrusted third-party extension source code. This creates a surface for indirect prompt injection where malicious instructions embedded in the audited code could attempt to influence the agent's behavior.
- Ingestion points: PHP, JavaScript, and template files within analyzed WooCommerce extensions.
- Boundary markers: Absent. The instructions do not specify the use of delimiters when reading external code files.
- Capability inventory: The skill requires the agent to perform code searches, inventory API dependencies, and verify runtime behaviors such as REST API schemas and Action Scheduler jobs.
- Sanitization: Absent. There are no instructions to sanitize or filter the content of the audited files before processing.
Audit Metadata