polylang-language-api
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical guidance for the Polylang WordPress API. All code examples for rendering dynamic content (e.g., in
pll_the_languages) correctly demonstrate the use of standard WordPress sanitization and escaping functions such asesc_url(),esc_attr(), andesc_html()to prevent cross-site scripting (XSS). - [SAFE]: The instructions include security-conscious design patterns, such as implementing function guards to ensure the Polylang plugin is active before execution and advising against direct access to superglobal variables like
$_GET['lang']. - [SAFE]: All external references point to the official documentation at
polylang.pro, which is the established service provider for this plugin. - [SAFE]: Although the metadata contains a future-dated
last-updatedfield (2026), this appears to be a clerical error rather than a deceptive persistence or poisoning attempt and does not impact the security of the skill's instructions.
Audit Metadata