woo-hooks-filters
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical guidance, code patterns, and best practices for extending WooCommerce functionality via actions and filters. No malicious instructions, obfuscation, or unauthorized data access patterns were found.
- [EXTERNAL_DOWNLOADS]: The instructions recommend fetching live documentation from the official developer portals for WordPress (developer.wordpress.org) and WooCommerce (developer.woocommerce.com). These are well-known, trusted sources within the development community.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it ingests external data via web fetching tools.
- Ingestion points: Documentation URLs in
SKILL.md. - Boundary markers: None identified in the prompt templates.
- Capability inventory:
Write,Edit,Bash,WebSearch,WebFetch. - Sanitization: None specified for external content. Despite the lack of explicit boundaries or sanitization, the risk is mitigated by the fact that the recommended sources are official documentation, and the skill's primary purpose is informational documentation for a developer user.
Audit Metadata