whop-connect
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill follows security best practices by explicitly instructing the agent to disclose the administrative permissions granted during the OAuth process and advising users on how to disconnect.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided business identifiers via
$ARGUMENTS. While this creates a surface for indirect prompt injection, the risk is minimal as the skill's capabilities are limited to connection status verification and account listing without performing destructive actions.
Audit Metadata