wp-admin-urls
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill acts as a documentation resource for building internal WordPress URLs.
- [COMMAND_EXECUTION]: Provides a
grepcommand example to assist developers in finding constants within the local codebase, which is a standard development workflow. - [INDIRECT_PROMPT_INJECTION]: Documentation discusses building URLs from data structures (like the
messagesJSON array). However, it mitigates potential injection risks by mandating the use of helper functions that perform proper encoding (e.g.,wp_json_encode,rawurlencode).
Audit Metadata