wp-admin-postbox-sortable
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional, providing valid PHP and JavaScript code snippets for WordPress plugin development. It follows standard security best practices such as utilizing WordPress nonces (
wp_nonce_field,check_ajax_referer) to prevent CSRF and using sanitization functions (esc_html,esc_url_raw) to mitigate XSS risks. - [SAFE]: All external references point to official documentation for WordPress and jQuery UI. The script dependencies (
postbox,jquery-ui-sortable,wp-a11y) are trusted core components of the WordPress environment. - [SAFE]: The skill correctly advises against global script enqueuing, promoting the principle of least privilege by restricting admin scripts to specific plugin pages.
- [SAFE]: No evidence of obfuscation, remote code execution, persistence mechanisms, or data exfiltration was found. The metadata is consistent with the skill's purpose.
Audit Metadata