wp-filesystem-api
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for the WordPress Filesystem API. Analysis of the provided instructions and reference files shows adherence to WordPress security standards.
- The skill correctly identifies that
WP_Filesystemis a necessary abstraction for diverse hosting environments to ensure compatibility across different server configurations. - It includes explicit warnings against insecure practices, such as hardcoding
FS_METHODas 'direct' or attempting to store FTP credentials, which is a key security best practice in the WordPress ecosystem. - The documentation correctly notes that the
request_filesystem_credentials()function is interactive and should not be used in non-interactive contexts like REST API calls or Cron jobs. - No malicious patterns, such as prompt injection, obfuscation, or unauthorized data exfiltration, were detected. The author metadata and contact information are consistent with the provided vendor context.
Audit Metadata