wp-docker-compose-stack
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill documents standard and safe practices for setting up a local WordPress development environment. It includes mechanisms for sharing environment variables across containers using YAML anchors, which is a recommended practice for consistency.
- [EXTERNAL_DOWNLOADS]: The skill references official images from Docker Hub, including wordpress, mariadb, and redis, as well as well-known community images like axllent/mailpit. It also utilizes standard PHP extension installation via pecl. These resources are from established and well-known services.
- [COMMAND_EXECUTION]: The provided examples use standard WP-CLI commands (e.g., wp core install, wp plugin install) and Docker Compose commands. These are used strictly for environment setup and management as intended by the skill's purpose.
- [DYNAMIC_EXECUTION]: The skill correctly identifies that the official WordPress image evaluates the WORDPRESS_CONFIG_EXTRA environment variable at runtime. The documentation provides safe code snippets for this variable, including best practices like guarding constant definitions with defined() checks to avoid conflicts with WP-CLI.
Audit Metadata