classic-theme-security-standards
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a security reference for WordPress theme development. It correctly identifies and instructs on mitigating common vulnerabilities such as Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and SQL Injection.
- [SAFE]: Code snippets demonstrate secure implementation patterns, such as using
esc_html(),wp_unslash(),wp_nonce_field(), and$wpdb->prepare(). These align with official WordPress security standards. - [SAFE]: The metadata and external references point to legitimate WordPress documentation and standard project structures. No suspicious external dependencies or remote code patterns were identified.
- [SAFE]: No signs of obfuscation, persistence mechanisms, or privilege escalation attempts were found. The skill does not perform any autonomous actions or network requests.
Audit Metadata