site-creator

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill extracts site configuration details from user-provided prompts and design documents to create a site brief.
  • Ingestion points: User-supplied project briefs, rough ideas, and visual assets like images or logos (SKILL.md, Step 3).
  • Boundary markers: The workflow mandates a human-in-the-loop step where the extracted brief is presented to the user for validation or modification before any build actions occur (SKILL.md, Step 4).
  • Capability inventory: Operations include site configuration via studio and content creation via wp_cli (SKILL.md, Steps 5 and 6).
  • Sanitization: The skill relies on user review of the brief to identify and correct any unwanted inferences or instructions.
  • [COMMAND_EXECUTION]: The skill utilizes wp_cli for standard WordPress operations, such as writing content to pages or posts and modifying theme files.
  • [SAFE]: The skill is authored by a known entity in the WordPress ecosystem and uses standard telemetry through record_workflow_event to track the lifecycle of the site creation process.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 09:00 PM