wordpress-security-validation
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of educational documentation and code snippets focused on WordPress security best practices such as sanitization, validation, and escaping.
- [SAFE]: No executable scripts or configuration files that could be used for malicious purposes were found in the package.
- [SAFE]: All external tools referenced (such as WPScan or PHP Code Sniffer) are standard industry utilities for security auditing and are mentioned only for testing guidance.
- [INDIRECT_PROMPT_INJECTION]: The documentation provides examples of handling external data via PHP superglobals (e.g., $_POST, $_GET), but it explicitly teaches and requires the use of boundary markers (nonces) and sanitization/validation functions to prevent exploitation.
Audit Metadata