wp-block-themes
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes
theme.jsonconfiguration files from the repository which could contain malicious data.\n - Ingestion points:
scripts/detect_block_themes.mjsreadstheme.jsonfiles directly from the filesystem to extract metadata.\n - Boundary markers: The skill lacks explicit markers or instructions to treat ingested file content as untrusted data.\n
- Capability inventory: The agent context includes bash and node execution, as well as potential access to
wp-cli.\n - Sanitization: No sanitization is performed on the JSON values before they are used to summarize theme status for the agent.\n- [METADATA_POISONING]: The skill includes reference material describing non-existent future software features.\n
- The file
references/theme-json.mdrefers to WordPress 6.9 features and includes links dated November 2025.\n - These links and versions are currently invalid or future-dated, which could mislead the agent's logic or developer implementation but do not present a direct security threat.
Audit Metadata