respira-woocommerce
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the WordPress Abilities API to manage e-commerce data through a set of specialized tools (e.g.,
update-product,update-order-status). These operations are scoped to the site's database and template files and are verified through license and context checks. - [EXTERNAL_DOWNLOADS]: The documentation references a required commercial add-on and directs users to the official vendor domain (
respira.press) for procurement. These are standard vendor dependencies for the platform's extended functionality. - [SAFE]: Comprehensive analysis found no evidence of prompt injection, data exfiltration, or obfuscation. The skill's instructions emphasize defensive operations, such as creating page snapshots before layout changes and validating user intent for financial settings like currency or coupon types.
Audit Metadata