bd-companion-plugin
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes WP-CLI (
wp better-data) to execute specific subcommands for testing, seeding, and purging data. These commands are essential to the intended development and testing workflow of the plugin. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from a live WordPress environment, including custom post types and metadata. This introduces an attack surface where malformed or malicious data stored in the database could potentially influence the AI agent's behavior during analysis or testing tasks.
- [EXTERNAL_DOWNLOADS]: The skill references the 'lonsdale201/better-data' library as a dependency. This is a resource from a recognized vendor and is documented here as part of the standard library integration.
Audit Metadata