wp-plugin-options-storage
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and provides best practices for WordPress development. No malicious behavior or suspicious code patterns were identified.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No evidence of sensitive data harvesting or unauthorized network communication. The skill appropriately advises against storing secrets in autoloaded options and correctly identifies wp-config.php as a more secure alternative for sensitive constants.
- [REMOTE_CODE_EXECUTION]: No remote script execution or unverifiable dependency installation patterns were found. The code snippets provided are standard WordPress PHP API calls.
- [OBFUSCATION]: No obfuscated text, hidden URLs, or encoded payloads were detected. All external references are to official WordPress documentation.
- [PROMPT_INJECTION]: The instructions do not contain attempts to override agent behavior or bypass safety guardrails.
- [INDIRECT_PROMPT_INJECTION]: While the skill guides the agent in generating code that handles data persistence, it does not introduce runtime injection vulnerabilities or ingest untrusted external data within its own logic.
Audit Metadata