generating-patterns
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill generates PHP pattern files for WordPress themes. It mandates specific PHP headers and restricts additional PHP logic to a single sanctioned function (esc_url), explicitly flagging other PHP tags as injection attempts.- [PROMPT_INJECTION]: The skill processes untrusted data extracted from third-party websites (HTML content, headings, body text) to generate theme patterns. This creates an indirect prompt injection surface. However, the skill implements strong mitigations, including a 'Cardinal rule' for verbatim text reproduction and a mandatory validation gate (liberate_validate_artifacts) that scans generated artifacts for malicious code or unauthorized script tags.
Audit Metadata