wp-rest-api-development
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides ripgrep (
rg) commands for searching local PHP files for specific coding patterns, such as route registrations and permission callbacks. These commands are diagnostic tools for the agent to perform its intended code review function. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted code from WordPress plugins and themes. While this represents a surface for indirect prompt injection, the skill's capabilities are limited to static analysis and reporting. It does not perform network operations or high-privilege file writes based on the content of the analyzed files.
- Ingestion points: Processes PHP files and code snippets related to WordPress REST API development (SKILL.md).
- Boundary markers: None explicitly defined for untrusted code input.
- Capability inventory: Uses
rgfor file searching; provides guidance for code analysis and reporting. - Sanitization: Not applicable as the skill focuses on static code review rather than code execution or transformation.
Audit Metadata