wordpress-router

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates navigation and workflow selection for WordPress development tasks by analyzing project structure.- [COMMAND_EXECUTION]: The skill executes a local Node.js triage script at 'skills/wp-project-triage/scripts/detect_wp_project.mjs' to identify the project kind. This is a standard operation for a routing component within this platform.- [PROMPT_INJECTION]: The skill analyzes untrusted project files to determine repository classification, identifying an indirect prompt injection surface that is necessary for its primary function.
  • Ingestion points: Reads repository configuration files including 'composer.json', 'package.json', 'style.css', 'block.json', and 'theme.json'.
  • Boundary markers: None explicitly defined for the triage output processing.
  • Capability inventory: Executes local Node.js scripts and routes the agent to specialized domain skills.
  • Sanitization: No validation or sanitization of project metadata is observed in the routing logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 03:15 AM
Security Audit — agent-trust-hub — wordpress-router