lw-lms-learndash-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of WP-CLI commands (
wp lw-lms migrate-learndash). This is standard behavior for a WordPress maintenance skill. - [INDIRECT_PROMPT_INJECTION]: The skill operates on an untrusted data source from the WordPress database, which could potentially contain malicious instructions.
- Ingestion points: LearnDash post data (
sfwd-courses,sfwd-lessons) referenced in SKILL.md. - Boundary markers: The skill does not define specific delimiters to separate processed data from agent instructions.
- Capability inventory: The migration command performs write operations to the database (creating posts and metadata).
- Sanitization: No explicit sanitization or filtering of the source content is mentioned in the prompt instructions.
Audit Metadata