wcs-health-check-processing
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate developer and administrator guidance for WooCommerce Subscriptions. It emphasizes using official APIs and built-in tools over manual database manipulation to prevent data desynchronization.
- [DATA_EXPOSURE]: The skill mentions the existence of a tokenized REST endpoint for web cron support. It explicitly includes a security warning instructing the agent to treat the URL and token as a secret and to avoid exposing it in logs, frontend markup, or screenshots.
- [COMMAND_EXECUTION]: Includes standard diagnostic commands using WP-CLI for managing action schedules and querying database state. These are documented for administrative troubleshooting purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a potential attack surface through data ingestion from external sources.
- Ingestion points: Subscription data from the
wcs_health_check_candidatestable and logs from thewcs-health-checksource. - Boundary markers: The instructions do not define specific delimiters or boundary markers for the ingested data.
- Capability inventory: The skill uses WP-CLI for shell command execution and database queries.
- Sanitization: No specific sanitization or filtering of external data content is implemented.
Audit Metadata