The Agent Skills Directory

[SAFE]: The skill serves as a technical guide for the WordPress Style Engine. It promotes secure coding practices by explicitly warning against the interpolation of untrusted data into structural CSS components like selectors and media queries to prevent CSS injection vulnerabilities.\n- [INDIRECT_PROMPT_INJECTION]: The skill describes an interface (the Style Engine API) that processes structured data. While this represents a potential surface for indirect injection if a developer uses it to process untrusted input, the documentation provides comprehensive remediation guidance to ensure safety.\n
Ingestion points: The PHP functions wp_style_engine_get_styles and wp_style_engine_get_stylesheet_from_css_rules in SKILL.md are identified as data ingestion points for style objects and rule arrays.\n
Boundary markers: The instructions include clear warnings to use allowlists and to never interpolate request-based or remote data directly into structural fields.\n
Capability inventory: The skill documents the generation of CSS strings and their application via standard WordPress functions like wp_add_inline_style.\n
Sanitization: The analysis confirms that the skill correctly references WordPress's internal WP_Style_Engine_CSS_Declarations and safe CSS filtering as the primary mechanisms for sanitizing style values.

wp-style-engine