creating-themes
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill mandates the localization of external assets like fonts and logos during site replication, which prevents hot-linking to third-party CDNs and enhances site privacy and performance.
- [SAFE]: Instructions for generating theme files include security best practices, such as using function_exists() guards in functions.php and omitting closing PHP tags to avoid accidental header errors.
- [INDIRECT_PROMPT_INJECTION]: The skill includes guidelines for replicating external source sites, which involves ingesting third-party HTML and CSS. While this is an attack surface, the skill defines specific sanitization rules (e.g., line-height validation) and structural constraints that mitigate the risk of processing malicious embedded content.
- [DATA_EXFILTRATION]: No sensitive file paths are accessed and all network-related references target well-known, trusted services like Google Fonts and WordPress.org.
- [COMMAND_EXECUTION]: No shell command patterns or dynamic context injection markers were detected in the skill instructions or referenced documentation.
Audit Metadata