wp-security-secrets
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted WordPress plugin or theme code provided by the user, which presents an indirect prompt injection surface. \n
- Ingestion points: User-provided source code files, snippets, or diffs passed to the agent for auditing (SKILL.md). \n
- Boundary markers: None identified. The instructions do not define specific delimiters or instructions to ignore potential commands embedded within the analyzed code snippets. \n
- Capability inventory: The skill is limited to analytical reasoning and generating a text-based report. It does not utilize tools for file system writes, network requests, or subprocess execution. \n
- Sanitization: None identified. The skill processes the input code directly as text for pattern matching.
Audit Metadata