wp-locale-and-dates
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation resource that provides instructions and best practices for using WordPress-specific date and time functions. It does not include any executable scripts, command execution patterns, or persistence mechanisms.
- [SAFE]: The documentation references official WordPress developer resources (developer.wordpress.org and make.wordpress.org), which are trusted and well-known documentation sites.
- [SAFE]: The skill promotes secure coding practices by explicitly recommending the use of
esc_html()when displaying date information and advising developers to validate user-supplied date strings before conversion or storage. - [INDIRECT_PROMPT_INJECTION]: While the skill involves processing untrusted user input (date and number strings), it provides clear instructions on boundary markers and sanitization methods to prevent exploitation. The capability is limited to date conversion and formatting. Evidence of safe handling is present in the "Storing dates" and "Display" sections. (Severity: SAFE)
Audit Metadata