plugin-creator

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the studio tool to execute wp_cli commands and perform site management tasks. This is standard functionality for the intended development environment and the Automattic Studio platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill generates code based on user requirements, which creates an attack surface for indirect prompt injection.
  • Ingestion points: User requests for custom WordPress functionality as described in the workflow in SKILL.md.
  • Boundary markers: None explicitly defined in the skill instructions.
  • Capability inventory: The skill creates files under <site-path>/wp-content/plugins/<slug>/ and uses the studio tool for site activation and command execution (SKILL.md).
  • Sanitization: The instructions explicitly mandate the enforcement of capability checks, nonces, input sanitization, and output escaping in the generated plugin code (SKILL.md).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 09:00 PM