wp-plugin-presenter
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines secure architectural patterns for data presentation in WordPress development. It emphasizes moving data formatting and filtering out of controllers and into dedicated Presenter classes that follow the principle of least privilege through allowlisting.
- [INDIRECT_PROMPT_INJECTION]: The skill addresses the processing of untrusted data from REST and AJAX request handlers. It mitigates potential injection vulnerabilities by mandating strict field allowlists and requiring appropriate contextual escaping (e.g.,
esc_html,esc_url,wp_json_encode) at the final output boundary. - [DATA_EXFILTRATION]: The instructions specifically implement a 'redaction by default' posture for sensitive data. It provides patterns for masking credentials (like API keys) in standard responses and ensures that sensitive information is only revealed through explicit methods that receive an authorization decision from the controller layer.
Audit Metadata