wp-plugin-assets-loading
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains standard programming guidelines for WordPress development. No evidence of prompt injection, data exfiltration, or persistence mechanisms was found.
- [EXTERNAL_DOWNLOADS]: The skill references official WordPress developer resources and field guides (make.wordpress.org and developer.wordpress.org). These are well-known, trusted services for the context of this skill.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing and generating code, it promotes secure coding practices by explicitly instructing the use of
wp_json_encodefor boot data to prevent injection vulnerabilities. - [COMMAND_EXECUTION]: All code examples are standard WordPress PHP function calls (e.g.,
wp_enqueue_script,wp_register_script_module) intended for the WordPress execution environment, with no misuse of system-level commands identified.
Audit Metadata