wp-phpcs-coding-standards
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install standard PHP development packages from Packagist using Composer, specifically
wp-coding-standards/wpcs,phpcompatibility/phpcompatibility-wp, anddealerdirect/phpcodesniffer-composer-installer. These are widely used, industry-standard tools for WordPress development. - [COMMAND_EXECUTION]: The skill facilitates the execution of local command-line tools for code linting (
phpcs) and automatic formatting (phpcbf), along with standard Composer configuration commands. These operations are restricted to the local development environment. - [INDIRECT_PROMPT_INJECTION]: As the skill configures tools that ingest and process external source code, it inherently involves a processing surface for untrusted data. However, this is the intended primary function of the linter, and the skill provides appropriate guidance for scoped suppressions.
- [SAFE]: The skill demonstrates security best practices by explicitly advising users to update to version 3.4.1 or higher to resolve a known vulnerability in the
WordPress.WP.EnqueuedResourceParameterssniff, showing a proactive security posture.
Audit Metadata