skills/eugenepyvovarov/mcpbundler-agent-skills-marketplace/wp-plugin-development/Gen Agent Trust Hub
wp-plugin-development
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
scripts/detect_plugins.mjsusing Node.js to scan the project directory. The script recursively finds PHP files and extracts WordPress plugin header metadata (Name, Description, Author, etc.) to help the agent identify active plugins within the codebase. - [PROMPT_INJECTION]: The skill exhibits an indirect injection surface through its file scanning utility.
- Ingestion points: Data is ingested from the headers of
.phpfiles located within the project repository viascripts/detect_plugins.mjs. - Boundary markers: There are no boundary markers or explicit delimiters used to separate the extracted header data from the agent's instructions in the tool output.
- Capability inventory: The skill provides patterns for full-lifecycle plugin development, including file modifications, hook registration, and database schema management using the WordPress API.
- Sanitization: The detection script uses regular expressions to extract text and outputs it in a structured JSON format without sanitizing for embedded natural language instructions.
Audit Metadata