wcs-subscription-hooks
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's workflow instructs the agent to use
rg(ripgrep) to search for hook and function definitions within thewp-content/plugins/woocommerce-subscriptions/directory. This is used as a discovery tool to verify the installed plugin's code and is restricted to specific local paths. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of local plugin source code into the agent's context for analysis.
- Ingestion points: Source code files located in
wp-content/plugins/woocommerce-subscriptions/retrieved viarg. - Boundary markers: None identified in the workflow instructions.
- Capability inventory: The skill uses
rgfor reading and searching; it does not include instructions for network exfiltration or dangerous file writing based on this data. - Sanitization: There is no explicit sanitization of the code content before it is processed by the agent.
Audit Metadata