woo-plugin-dev
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch and process content from external developer portals, which creates a potential surface for indirect instructions.
- Ingestion points: Uses WebFetch to retrieve documentation from developer.wordpress.org and developer.woocommerce.com.
- Boundary markers: The instructions do not define specific delimiters to isolate the fetched external content from the agent's core instructions.
- Capability inventory: The agent has access to powerful tools including Bash, Write, and Edit which could be target of instructions embedded in documentation.
- Sanitization: There is no requirement in the skill to sanitize or validate the content of the fetched pages before the agent acts upon the information.
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and guidelines from official, well-known technology services (WordPress and WooCommerce). These sources are considered standard and safe for development purposes.
Audit Metadata