wp-playground
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation describes the use of standard development tools for WordPress Playground. It relies on the official
@wp-playground/clipackage from npm. - [COMMAND_EXECUTION]: The skill provides instructions for running
npx @wp-playground/cli@latestcommands. These are standard developer operations for local environment setup. The usage of flags like--auto-mountand--blueprintare documented features of the WordPress Playground ecosystem for local file system interaction and configuration. - [EXTERNAL_DOWNLOADS]: The skill references downloads from official and well-known sources such as
downloads.wordpress.orgfor themes and plugins, andplayground.wordpress.netfor schemas and blueprints. These are trusted sources within the WordPress community. - [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external Blueprints (JSON files), it includes explicit guardrails (Procedure step 0) warning users not to use production data and to ensure local code is clean of secrets before mounting. The inherent risk is low as the environments are ephemeral and isolated via WebAssembly.
Audit Metadata