wordpress-pro
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [SAFE]: The skill provides a robust framework for WordPress development that prioritizes security by design. It includes mandatory constraints for the AI agent to follow official coding standards and implement essential security measures like nonces and capability checks.
- [SAFE]: Implementation examples consistently demonstrate safe data handling practices, including the use of sanitization functions like sanitize_text_field and output escaping with functions such as esc_html and esc_attr.
- [EXTERNAL_DOWNLOADS]: The documentation references standard and verified developer dependencies from the WordPress ecosystem, specifically the @wordpress/scripts and @wordpress/create-block packages used for block development.
- [REMOTE_CODE_EXECUTION]: The plugin architecture module includes a boilerplate for a self-hosted update checker. This implementation uses the standard wp_remote_get function to fetch metadata from a remote JSON endpoint to facilitate plugin updates, using well-known placeholder domains for the example configuration.
Audit Metadata