wp-cli-database-ops
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from a WordPress database (such as options, user metadata, and post content). This data is externally controlled and could contain malicious instructions intended to manipulate the agent's logic or downstream actions.
- Ingestion points: Data is retrieved from the environment using
wp option,wp user,wp cron, andwp db querycommands as specified in the Workflow. - Boundary markers: The instructions do not define delimiters or provide specific warnings to the agent to disregard instructions embedded within the database content it retrieves.
- Capability inventory: The agent has the capability to perform database mutations, global search-replace operations, and plugin management via WP-CLI.
- Sanitization: There are no explicit requirements for the agent to sanitize or validate the content of database fields before using that content in subsequent reasoning or command construction.
- [NO_CODE]: The skill contains only instructional documentation (SKILL.md) and does not include any executable scripts or binary files, which reduces the direct execution risk profile.
Audit Metadata