Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add respira-press/agent-skills-wordpress --skill woocommerce-health-checkgit clone --depth 1 https://github.com/respira-press/agent-skills-wordpressWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/respira-press/agent-skills-wordpress/woocommerce-health-check)<a href="https://agentmods.dev/skills/respira-press/agent-skills-wordpress/woocommerce-health-check"><img src="https://agentmods.dev/badge/skills/respira-press/agent-skills-wordpress/woocommerce-health-check/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/respira-press/agent-skills-wordpress/woocommerce-health-check"><img src="https://agentmods.dev/badge/skills/respira-press/agent-skills-wordpress/woocommerce-health-check.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 71 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium Data Exfiltration · line 352 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00059 | $0.05858 |
| Opus 5 | $0.00030 | $0.02929 |
| Sonnet 5 | $0.00012 | $0.01172 |
| Haiku 4.5 | $0.00006 | $0.00586 |
Grade A, and why
woocommerce-health-check scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLlowData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
fetch("https://www.respira.press/api/skills/track-usage", { method: "POST", Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
How it starts
The opening of the file, as written. The whole thing — 733 lines — stays where its author put it; the contents beside it link to each section on GitHub.
WooCommerce Health Check
Version: 1.2.0
Updated: 2026-06-30
Freshly updated: v1.2.0 adds real order/sales/stock diagnostics via the woocommerce_* read tools (woocommerce_list_orders, woocommerce_sales_report, woocommerce_get_stock_status), gives every detected issue a concrete safe-fix suggestion, uses respira_find_element to locate and validate the actual cart/checkout widgets and blocks, snapshots with respira_get_snapshot before any fix, and frames respira_generate_activity_report as a "prevented X lost orders / revenue protected" report.
Category: audit
Status: active
Requires: Respira for WordPress plugin + MCP server + WooCommerce (requires_addon: woocommerce)
Telemetry endpoint: https://www.respira.press/api/skills/track-usage
Description
Detect checkout issues, cart problems, and configuration errors silently losing sales.
WooCommerce Health Check scans your store for common configuration issues that break checkout flow and lose sales. It detects mobile checkout problems, payment gateway setup issues, AJAX URL mismatches, caching configuration errors on cart/checkout pages, and SSL problems. This skill identifies the exact issues causing cart abandonment and provides Respira workflows to test fixes safely on duplicate pages before going live.
Trigger Phrases
This skill activates when the user says any of the following:
- "audit my woocommerce store"
- "check woocommerce health"
- "find checkout problems"
- "woocommerce diagnostic"
- "why is my checkout broken"
- "scan woocommerce configuration"
- "woocommerce health check"
- "checkout not working woocommerce"
- "cart problems woocommerce"
- "woocommerce checkout issues"
- "losing sales woocommerce"
- "woocommerce configuration audit"
Do NOT trigger for: general WordPress audits without WooCommerce context, plugin installation requests, theme customization, or non-WooCommerce e-commerce questions.
Execution Workflow
Step 1: Respira + WooCommerce Verification
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 733 lines · 59 tokens per session scan A 55a38311fdac
woocommerce-health-check is a skill published in the GitHub repository respira-press/agent-skills-wordpress (43 stars, last pushed 3d ago), licensed MIT. It adds 59 tokens to every session and 5,858 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (sends data to an external url). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
refund-processor
Process a refund request by gathering context and preparing the refund workflow.
seo-ecommerce
E-commerce SEO analysis: Google Shopping visibility, Amazon marketplace intelligence, product schema validation, competitor pricing analysis, and marketplace keyword gaps. Combines on-page product SEO with marketplace data from DataForSEO Merchant API. Use when user says "ecommerce SEO", "product SEO", "Google…
kelly-inquiry
Personal App-in-Skill inbound-inquiry reception desk (Busabase App-in-Skill) for cross-border/foreign-trade sellers, aggregating WhatsApp, Instagram, Messenger, and email inquiries into a pipeline with a product knowledge base, quote worksheet, approval queue, and follow-up reminders. Use when the user invokes…
kelly-listing
A product-listing workspace for cross-border e-commerce sellers. It turns product information into drafts for Amazon, Shopify, TikTok Shop and eBay, including versions for different countries.
kelly-picks
Product-research (选品) desk (Busabase App-in-Skill) for a cross-border e-commerce seller. The agent sweeps trend sources — Amazon BSR movers, TikTok viral product videos, Temu/AliExpress rising items, Google Trends terms, competitor new launches — and files product candidates with margin cards (landed cost, fees…
kelly-products
An e-commerce product-management workspace for product records, SKUs, prices, inventory, sales-channel status, assets, compliance notes, and product lifecycle stages.