wp-block-registration-and-assets
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains technical documentation for WordPress developers, focusing on best practices for the block editor. All code snippets provided are standard WordPress PHP and JSON configurations.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for handling untrusted content within WordPress blocks.
- Ingestion points: The skill identifies block attributes and inner markup as primary ingestion points for untrusted data.
- Boundary markers: It promotes the use of standard WordPress functions like
get_block_wrapper_attributes()to maintain proper HTML boundaries. - Capability inventory: The skill describes standard WordPress registration and rendering mechanisms (
register_block_type,render_callback). - Sanitization: Instructions explicitly mandate the use of
esc_html(),sanitizeBlockAttributes(), and KSES to mitigate risks when processing untrusted data. - [EXTERNAL_DOWNLOADS]: The skill includes references to official WordPress Core development blogs (make.wordpress.org), which are well-known and trusted sources for technical documentation.
Audit Metadata