wordpress-pro
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive security guidelines, mandating the use of WordPress nonces for form validation and capability checks (e.g.,
current_user_can) for privileged operations. - [SAFE]: All code examples for data output utilize correct escaping functions (such as
esc_htmlandwp_kses_post), and input handling includes appropriate sanitization functions (e.g.,sanitize_text_field). - [SAFE]: Database interaction patterns strictly use prepared statements (
$wpdb->prepare) to mitigate SQL injection risks. - [SAFE]: The skill references official WordPress development packages (e.g.,
@wordpress/scripts) and standard architectural patterns for plugin updates using safe placeholder domains for educational purposes.
Audit Metadata