wordpress
Warn
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: MEDIUMSAFENO_CODE
Full Analysis
- [SAFE]: The skill primarily consists of documentation, process checklists, and organizational templates for WordPress development. It does not contain any executable scripts or automation that performs actions on the host system.
- [SEMANTIC_ISSUE]: In
SKILL.md, the 'Custom REST API Endpoint' example uses'permission_callback' => '__return_true'. This pattern explicitly disables permission checks for the endpoint. While potentially acceptable for public data, providing it as a generic template without a warning encourages the creation of insecure API endpoints that lack proper authorization (nonces or capability checks).
Audit Metadata