je-query-builder-custom-type
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides legitimate architectural patterns for extending JetEngine. No signs of malicious command execution, unauthorized data exfiltration, or persistence mechanisms were found during the analysis of the registration hooks and runtime skeletons.\n- [INDIRECT_PROMPT_INJECTION]: The skill addresses potential injection surfaces where untrusted data from UI controls or external APIs is processed. It mitigates these risks by demonstrating robust validation and sanitization.\n
- Ingestion points: SKILL.md identifies query settings, filters, and REST inputs as primary untrusted data sources.\n
- Boundary markers: Logic within set_filtered_prop ensures that filters can only narrow query results, preventing unauthorized access to data outside the intended scope.\n
- Capability inventory: The implementation involves read-only access to custom repositories and tables through the WordPress database layer.\n
- Sanitization: Code examples explicitly include the implementation of standard WordPress sanitization functions like sanitize_key and absint for all query parameters.\n- [EXTERNAL_DOWNLOADS]: The skill references official knowledge base articles and developer documentation from Crocoblock. These links target a well-known service and trusted organization within the WordPress development community.
Audit Metadata