wp-block-development

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill focuses on WordPress Gutenberg block development and provides instructions consistent with official WordPress Developer Resources. No prompt injection or malicious behavior was found in the instructions.
  • [COMMAND_EXECUTION]: The skill includes a Node.js script scripts/list_blocks.mjs used for project triage. This script performs recursive filesystem searches for block.json files and parses their content to provide the agent with a summary of available blocks. The operations are read-only and confined to the project directory.
  • [EXTERNAL_DOWNLOADS]: The skill references standard WordPress development packages like @wordpress/scripts, @wordpress/create-block, and wp-env. These are official, well-known tools from the WordPress ecosystem and are considered safe.
  • [DATA_EXFILTRATION]: No network-enabled commands or exfiltration patterns were detected. The local scripts do not initiate any external connections.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 03:15 AM
Security Audit — agent-trust-hub — wp-block-development