Trust Assessment
woocommerce received a trust score of 90/100, placing it in the Trusted category. This skill has passed all critical security checks and demonstrates strong security practices.
SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Potential Command Injection via `curl` examples.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential Command Injection via `curl` examples The `SKILL.md` provides multiple `curl` command examples that directly embed URL parameters and JSON body content into a shell string. If an LLM is instructed to generate and execute these commands based on unsanitized user input, a malicious actor could inject arbitrary shell commands by manipulating input that is intended for URL query parameters (e.g., `status`, `per_page`) or JSON data fields (e.g., `name`, `sku`). This could lead to arbitrary command execution on the host system where the `curl` command is run. This pattern is repeated across all `curl` examples in the documentation. For LLM developers: When generating code based on these examples, ensure that all user-provided input for URL parameters, headers, or JSON body content is strictly sanitized or passed through a safe API (e.g., Python `requests` library with parameters dictionary and JSON payload) rather than direct string interpolation into shell commands. For skill authors: Update `curl` examples to explicitly warn about input sanitization, or provide alternative examples using programming language HTTP client libraries that handle parameter encoding and JSON serialization safely. | LLM | SKILL.md:185 |
Scan History
Embed Code
[](https://skillshield.io/report/23d8392a0d003be8)
Powered by SkillShield