site-creator
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill extracts site configuration details from user-provided prompts and design documents to create a site brief.
- Ingestion points: User-supplied project briefs, rough ideas, and visual assets like images or logos (SKILL.md, Step 3).
- Boundary markers: The workflow mandates a human-in-the-loop step where the extracted brief is presented to the user for validation or modification before any build actions occur (SKILL.md, Step 4).
- Capability inventory: Operations include site configuration via
studioand content creation viawp_cli(SKILL.md, Steps 5 and 6). - Sanitization: The skill relies on user review of the brief to identify and correct any unwanted inferences or instructions.
- [COMMAND_EXECUTION]: The skill utilizes
wp_clifor standard WordPress operations, such as writing content to pages or posts and modifying theme files. - [SAFE]: The skill is authored by a known entity in the WordPress ecosystem and uses standard telemetry through
record_workflow_eventto track the lifecycle of the site creation process.
Audit Metadata