wp-abilities-api
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive instructions for registering and consuming WordPress abilities using established PHP and JavaScript patterns.
- [SAFE]: Instructions emphasize the mandatory use of
permission_callbackfor all registered abilities to ensure proper authorization. - [SAFE]: Detailed guidance is provided for input validation and sanitization (e.g., avoiding
empty()for ID validation and usingrawurlencodefor REST paths) to prevent common vulnerabilities. - [SAFE]: The skill uses a 'delegate helper' pattern and 'shared service' architecture, which are standard software engineering practices for reducing code duplication and ensuring consistent application of business rules.
- [SAFE]: No suspicious network operations, obfuscation, or unauthorized command execution patterns were detected.
Audit Metadata