The Agent Skills Directory

[SAFE]: The skill defines a standard set of operations for e-commerce management. It uses specific namespaces for tool identification and follows best practices by including explicit safety requirements for sensitive actions such as processing refunds or changing prices.
[PROMPT_INJECTION]: The skill processes data from external sources (WooCommerce store database) which represents a surface for indirect prompt injection.
Ingestion points: SKILL.md defines tools like woocommerce/list-orders and woocommerce/list-products that retrieve content from the store.
Boundary markers: Absent from the instructions.
Capability inventory: Tools are available to modify store data, such as woocommerce/update-order and woocommerce/update-product.
Sanitization: Not explicitly mentioned in the skill logic.
Note: This is a standard risk for skills that manage external databases; the skill mitigates this by instructing the agent to seek user confirmation before executing changes to live data.

wp-woocommerce