wpscan
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and parse data from external WordPress websites, which presents an attack surface for indirect prompt injection.\n
- Ingestion points: The agent reads and parses command output from
wpscanandcurlrequests targeting external domains inSKILL.mdandreferences/wordpress-testing.md.\n - Boundary markers: No explicit boundary markers or instructions to ignore embedded instructions in target data are present.\n
- Capability inventory: The skill provides instructions for shell command execution (
wpscan,curl,jq) which could be misused if an injection occurs.\n - Sanitization: No evidence of data sanitization or validation of the responses received from target servers is provided.\n- [COMMAND_EXECUTION]: The skill documents the use of powerful CLI tools for security auditing.\n
- It includes templates for automated vulnerability scanning, brute-force attacks, and SSRF testing using
wpscanandcurl.\n - It provides instructions for manual exploitation techniques, such as XML-RPC abuse and using web shell payloads like
<?php system($_GET['cmd']); ?>on target systems.
Audit Metadata