plugin-creator
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
studiotool to executewp_clicommands and perform site management tasks. This is standard functionality for the intended development environment and the Automattic Studio platform. - [INDIRECT_PROMPT_INJECTION]: The skill generates code based on user requirements, which creates an attack surface for indirect prompt injection.
- Ingestion points: User requests for custom WordPress functionality as described in the workflow in SKILL.md.
- Boundary markers: None explicitly defined in the skill instructions.
- Capability inventory: The skill creates files under
<site-path>/wp-content/plugins/<slug>/and uses thestudiotool for site activation and command execution (SKILL.md). - Sanitization: The instructions explicitly mandate the enforcement of capability checks, nonces, input sanitization, and output escaping in the generated plugin code (SKILL.md).
Audit Metadata