wordpress-testing-qa
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of standard development dependencies using Composer and GitHub Actions. These downloads target well-known and official repositories including Packagist (for PHPUnit, WPCS, and WP_Mock) and official GitHub Actions for PHP environment setup (shivammathur/setup-php) and code coverage (codecov/codecov-action). These are standard practices for the described workflow.
- [COMMAND_EXECUTION]: The instructions involve executing local shell commands for toolchain setup and testing, such as
composer,phpunit, andwp-cli. These commands are restricted to the local development environment and are necessary for the skill's stated purpose of quality assurance testing. - [INDIRECT_PROMPT_INJECTION]: As a testing guide, the skill defines a surface where an agent might ingest and process project-specific code and test results. While this represents a theoretical injection surface if processing untrusted project data, the skill includes standard setup patterns and focuses on testing isolated business logic and integration hooks, which are controlled development activities.
Audit Metadata