wp-phpunit-test-setup
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation for setting up WordPress integration tests using official and well-known community tools such as WP-CLI and GitHub Actions.
- [EXTERNAL_DOWNLOADS]: Mentions the use of
install-wp-tests.sh, a standard WordPress utility that downloads WordPress core and test libraries from official, well-known sources includingwordpress.organd official Subversion (SVN) repositories. - [COMMAND_EXECUTION]: Provides examples of standard shell commands for development workflows (
wp scaffold,bash bin/install-wp-tests.sh,vendor/bin/phpunit) and CI workflows. These are presented in a safe, instructional context and include warnings to verify generated output. - [CREDENTIALS_UNSAFE]: Includes common placeholder credentials (e.g.,
root,wordpress_test) in examples for local or CI database setup. These are industry-standard defaults for testing environments and do not represent a security risk. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a documentation resource for agent configuration. While it instructs the agent on how to set up testing environments, it does not ingest untrusted external data in a way that creates an exploitable attack surface.
Audit Metadata