Skills
Navigate
skills/firecrawl/agent-skills/wp-abilities-api/Gen Agent Trust Hub

wp-abilities-api

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill contains legitimate development instructions for the WordPress ecosystem. The code snippets provided for PHP registration and hook usage are consistent with standard WordPress practices.
  • [SAFE]: The documentation references official WordPress domains (wordpress.org) for further reading, which are verified and trusted sources.
  • [INDIRECT_PROMPT_INJECTION]: The skill documentation describes an API surface that handles external data, creating an ingestion point for indirect prompt injection.
  • Ingestion points: Data enters the system via registered REST API endpoints defined in the PHP implementation.
  • Boundary markers: The skill encourages the use of JSON Schema (input_schema) to define and constrain incoming data.
  • Capability inventory: The skill notes compatibility with bash, node, and WP-CLI tools.
  • Sanitization: The procedure explicitly recommends implementing permission_callback for access control and input_schema for validation, mitigating injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:54 PM
Security Audit — agent-trust-hub — wp-abilities-api