woocommerce
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses environment variables (
WOO_KEY,WOO_SECRET) to handle sensitive WooCommerce API credentials, avoiding the risk of hardcoded secrets.- [SAFE]: The Node.js dependency@woocommerce/woocommerce-rest-apiis an official and well-known library for the service.- [PROMPT_INJECTION]: The webhook handler inapi/woo/webhook.tsingests untrusted data from external sources; however, this is a standard e-commerce requirement and the data is used for legitimate notification purposes with no evidence of malicious intent or command injection.
Audit Metadata