wp-privacy-personal-data
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and code snippets for WordPress privacy integration. All code examples include appropriate security functions such as
sanitize_email,sanitize_text_field, andwp_kses_postto handle user input safely. - [SAFE]: The instructions emphasize important security boundaries, such as verifying nonces and capabilities before processing data, and specifically warn against exposing sensitive information like passwords or auth tokens in data exports.
- [EXTERNAL_DOWNLOADS]: The skill references official WordPress developer documentation (developer.wordpress.org) for further reading. These are well-known, trusted resources for the target environment.
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing user data (e.g., email addresses). While this represents a data ingestion surface, the skill explicitly includes and recommends sanitization functions and boundary validation to prevent injection or unauthorized data access.
Audit Metadata