woocommerce
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
@membranehq/cliglobal package via npm. This is a vendor-provided tool used to facilitate authentication and API interactions. - [COMMAND_EXECUTION]: The skill relies on the
membraneCLI for operations such as tenant login, connection management, and executing WooCommerce actions. - [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by ingesting untrusted data from WooCommerce store environments.
- Ingestion points: Data from product reviews, order notes, and customer details enters the agent context through actions like
list-orders,list-products, and direct API requests viamembrane request. - Boundary markers: The instructions do not specify the use of delimiters or provide warnings to the agent to ignore instructions embedded within the retrieved WooCommerce data.
- Capability inventory: The skill provides the agent with the ability to read and write data (orders, products, customers) and perform arbitrary HTTP requests to the store's API.
- Sanitization: There is no evidence of sanitization, filtering, or validation of the content returned from the external API before it is processed by the agent.
Audit Metadata