wp-admin-list-table
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed instructions for implementing WordPress admin tables while prioritizing security. It includes specific sections highlighting the 'bulk-action security gap' and provides corrected code to prevent Cross-Site Request Forgery (CSRF).
- [SAFE]: All code examples demonstrate secure coding patterns, including the use of
check_admin_referer()for request validation,current_user_can()for authorization, and robust sanitization functions likeabsint(),sanitize_key(), andesc_html(). - [SAFE]: No instances of prompt injection, obfuscation, or unauthorized data access were found. The skill correctly instructs developers to include core WordPress files via
require_onceand uses standard environment constants likeABSPATHsafely. - [SAFE]: The guidance for handling sortable columns includes a clear warning against raw SQL injection and provides a safe implementation using an allowed-list of keys.
Audit Metadata