wp-block-themes
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a Node.js script (
detect_block_themes.mjs) to identify theme roots by scanning fortheme.jsonfiles. This script implements safe recursion depth limits and ignores common build/dependency directories to prevent unnecessary processing. - [SAFE]: All external references point to legitimate WordPress developer documentation (
developer.wordpress.organdmake.wordpress.org). There is no evidence of typosquatting or redirection to malicious domains. - [SAFE]: The skill performs standard filesystem operations consistent with its stated purpose of WordPress development. It does not attempt to access sensitive system directories, perform network exfiltration, or execute obfuscated code.
Audit Metadata