wp-http-api-client
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive security guidelines for the WordPress HTTP API. It includes instructions for preventing SSRF (Server-Side Request Forgery), remote code execution (RCE) from API responses, and secure credential management.\n- [SAFE]: Code examples use standard WordPress security functions like
wp_safe_remote_get,wp_http_validate_url, anddownload_urlwith proper cleanup, demonstrating high-quality secure coding patterns.\n- [INDIRECT_PROMPT_INJECTION]: The skill naturally describes how to handle untrusted data from external APIs. It recommends strict schema validation, host allowlisting, and avoiding executable policies in remote responses to mitigate risks associated with processing external content. (Note: This is documented as a safety feature).
Audit Metadata