wp-block-development
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and patterns for WordPress block development, referencing official WordPress.org resources for best practices.
- [COMMAND_EXECUTION]: The skill includes a diagnostic script
scripts/list_blocks.mjsthat traverses the local directory to find and summarizeblock.jsonfiles. This is a standard project discovery task designed to provide structural context to the agent. - [EXTERNAL_DOWNLOADS]: The instructions reference official WordPress packages (such as
@wordpress/scriptsand@wordpress/create-block) and documentation URLs from trusted domains including wordpress.org and npmjs.com. These are standard dependencies for the described workflow. - [INDIRECT_PROMPT_INJECTION]: The
list_blocks.mjsscript processes metadata fromblock.jsonfiles found in the repository. While this processes data from the environment, the script's logic is limited to safe metadata extraction for reporting purposes, posing a minimal risk to the agent's control flow.
Audit Metadata