replicate-theme
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to run administrative scripts and WordPress CLI commands for site setup and content migration. It executes Node.js driver scripts and runs studio wp commands for theme activation and configuration.\n- [REMOTE_CODE_EXECUTION]: The skill generates a local PHP script named _swap.php and executes it using the wp eval-file command. This script programmatically updates WordPress post content with raw markup captured from the source site.\n- [EXTERNAL_DOWNLOADS]: The skill fetches missing media assets and font files from external CDN domains, such as static.parastorage.com, to facilitate local hosting of site resources.\n- [DATA_EXFILTRATION]: The skill identifies external asset references in the source site's code and performs network requests to download these files to the local environment.\n- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface due to the ingestion of raw, unsanitized HTML from external websites.\n
- Ingestion points: Source HTML files (html/*.html) and WXR export files (output.wxr) containing external content.\n
- Boundary markers: Absent; the skill's purpose is to carry source markup verbatim to achieve visual parity.\n
- Capability inventory: Execution of shell commands via Bash and high-privilege WordPress operations (unfiltered_html) via the wp-cli --user=admin flag.\n
- Sanitization: Intentionally bypassed during the content injection phase to maintain the fidelity of the original site's layout.
Audit Metadata