wp-playground-php-wasm
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for developers working with PHP in WebAssembly environments. It describes instance lifecycles, execution models, and virtual filesystem operations without introducing security risks.
- [EXTERNAL_DOWNLOADS]: References official upstream packages from the WordPress Playground project (@php-wasm/web and @php-wasm/universal). These are well-known, legitimate libraries for the documented use case.
- [COMMAND_EXECUTION]: Provides instructions for using the
php.run()method within the WebAssembly sandbox. This is the primary intended functionality of the system being described and does not represent an escape from the execution environment. - [DATA_EXFILTRATION]: Discusses networking configuration and proxy URLs (e.g.,
phpCorsProxyUrl) which are standard architectural requirements for enabling outbound HTTP requests from a browser-based WASM runtime.
Audit Metadata