classic-theme-comments-discussion
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for rendering user-generated content (WordPress comments) and post titles, which represents a potential injection surface.
- Ingestion points: The skill processes dynamic data via
get_the_title()andwp_list_comments(). - Boundary markers: None explicitly defined in the prompt text.
- Capability inventory: Limited to standard WordPress theme rendering; no file-system writes or unauthorized network operations.
- Sanitization: The skill explicitly mandates and demonstrates robust sanitization using WordPress functions like
esc_html(),esc_attr_e(), andnumber_format_i18n(). It also includes specific instructions to exclude private 'Editor Notes' from public comment queries, mitigating data exposure risks. - [EXTERNAL_DOWNLOADS]: The skill references official documentation from
developer.wordpress.org, which is a well-known and trusted service for WordPress development. These references are used for educational purposes and do not involve remote code execution. - [SAFE]: The skill demonstrates security best practices, including a mandatory password guard (
post_password_required()) to prevent content leaks and strict escaping of all dynamic values inserted into the HTML output.
Audit Metadata