wp-performance-review
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill audits untrusted third-party WordPress code (themes and plugins), which represents an inherent surface for indirect prompt injection if malicious instructions are embedded within the audited source files.\n
- Ingestion points: The skill processes user-supplied PHP and JavaScript source code files for review as part of its core workflow.\n
- Boundary markers: The instructions do not define specific delimiters to separate untrusted code data from the agent's instructions.\n
- Capability inventory: The agent utilizes file system read and search capabilities (e.g., ripgrep) to perform the audit.\n
- Sanitization: No specific guidance is provided for the agent to sanitize or ignore prompt-like content within the files being audited.
Audit Metadata