plugin-structure
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No instructions were found that attempt to override agent behavior, bypass safety filters, or extract system prompts. The content is strictly focused on WordPress development workflows.
- [DATA_EXFILTRATION]: The skill does not perform any network operations or access sensitive local files. It explicitly recommends against storing credentials or API keys within the plugin directory.
- [EXTERNAL_DOWNLOADS]: No remote scripts, external binaries, or unverifiable packages are downloaded or executed. References to Composer's autoloader are standard for PHP development and do not involve untrusted remote code execution.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or passwords were found in the instructions or code examples.
- [COMMAND_EXECUTION]: The skill does not invoke shell commands, subprocesses, or dynamic execution functions like eval(). It provides static PHP templates for the user to implement.
Audit Metadata