wp-gravity-stack
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical orchestration guide, providing templates (e.g., composer.json, .cursorrules, llms.txt) for setting up a WordPress development environment with the Gravity product suite.
- [SAFE]: All external references target official documentation sites (gravityforms.com, pods.io, gravitywiz.com) or well-known GitHub repositories (pods-framework, gravityforms, gravitywiz).
- [SAFE]: The security checklists and bash script snippets are defensive utilities intended for manual execution by developers. They focus on verifying version requirements and ensuring sensitive credentials (like SendGrid or OpenAI keys) are stored in environment variables rather than the database.
- [SAFE]: Configuration examples for tools like SatisPress use clear placeholders (e.g., '<32-char-satispress-api-key>') and emphasize secure practices, such as adding sensitive files to .gitignore.
- [SAFE]: Patterns for AI integration (Category 8) correctly identify and mitigate risks like token exhaustion and automated bot submissions by recommending token ceilings and server-side challenges.
Audit Metadata