skills/lonsdale201/wp-agent-skills/translatepress-email-notification-compatibility/Gen Agent Trust Hub
translatepress-email-notification-compatibility
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for processing external data such as email content, shortcodes, and user metadata.
- Ingestion points: Data is ingested from user meta (
trp_language), WooCommerce order meta, and email template content processed viawp_mailfilters. - Boundary markers: The skill includes explicit warnings to restrict the shortcode surface and avoid running arbitrary shortcodes in untrusted email content.
- Capability inventory: The skill provides logic for rendering templates, switching language contexts, and diagnostic environment checks.
- Sanitization: Recommends standard WordPress internationalization and escaping practices (e.g.,
esc_html__). - [COMMAND_EXECUTION]: The skill includes standard WP-CLI diagnostic commands (
wp plugin list,wp option get, and awp evalfor version checking) to verify the execution environment. These commands are benign and intended for troubleshooting.
Audit Metadata