woo-performance
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains legitimate developer instructions for optimizing WooCommerce sites. All recommended tools and procedures, such as database indexing and caching, align with standard industry practices for WordPress development.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface by fetching external data.
- Ingestion points: The skill retrieves documentation from external websites using WebSearch and WebFetch tools in the 'Fetch live docs' section.
- Boundary markers: There are no instructions to the agent to treat external content as data rather than instructions, nor are there boundary markers for the retrieved content.
- Capability inventory: The skill utilizes high-capability tools including Bash, Write, and Edit, which could be manipulated if malicious content is fetched.
- Sanitization: The skill lacks logic to sanitize or validate the content retrieved from external documentation sources.
Audit Metadata