nonces
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on WordPress security best practices, specifically regarding nonces and CSRF protection. No malicious patterns, obfuscation, or unauthorized data access were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates handling of untrusted web request data (e.g.,
$_GET['id']) in code examples. - Ingestion points: Web request parameters in PHP examples (
references/examples.md). - Boundary markers: Not applicable to the data themselves, though instructions emphasize using nonces and capability checks as logical boundaries.
- Capability inventory: The examples mention functions like
wp_delete_postandwp_safe_redirect(references/examples.md). - Sanitization: The skill strongly mandates sanitization (e.g.,
absint,sanitize_text_field) and authorization (current_user_can) as critical mitigations alongside nonce verification.
Audit Metadata