wp-admin-notices
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard WordPress development patterns and best practices for UI components.
- [DATA_EXFILTRATION]: The skill correctly recommends per-user scoping for transients used for flash messages, preventing accidental cross-user data leakage.
- [INDIRECT_PROMPT_INJECTION]: The instructions emphasize the necessity of context-aware escaping and sanitization (using
wp_kses_post,esc_html, andesc_url) when rendering dynamic content in admin notices, which mitigates injection risks from untrusted database or user input.
Audit Metadata