lw-lms-rest-frontend
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFENO_CODEPROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill is strictly documentation-based, providing code templates and API definitions without any executable scripts or binary files.- [PROMPT_INJECTION]: The skill outlines how to ingest data from external REST API endpoints, which creates an attack surface for indirect prompt injection where API content could attempt to influence the agent.
- Ingestion points: Data from
/wp-json/lms/v1/endpoints. - Boundary markers: None provided in the documentation to isolate API content.
- Capability inventory: Network requests and data processing instructions.
- Sanitization: No specific sanitization methods for API responses are discussed.- [SAFE]: The documentation follows standard WordPress security protocols, including nonces for CSRF protection and application passwords for authenticated REST requests.
Audit Metadata