wp-block-development

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a legitimate development environment for WordPress blocks, using standard Node.js scripts for project introspection and referencing official documentation.\n- [COMMAND_EXECUTION]: The skill includes a script (scripts/list_blocks.mjs) that performs a recursive search for block.json files within the working directory. This script uses standard filesystem APIs (fs.readdirSync, fs.readFileSync), implements depth limits, and ignores non-project directories like node_modules and .git to ensure safe operation.\n- [EXTERNAL_DOWNLOADS]: Instructions within the skill recommend the use of official WordPress packages such as @wordpress/create-block and @wordpress/scripts. These are standard, well-known development tools maintained by the WordPress community.\n- [PROMPT_INJECTION]: Instruction files use task-oriented language and do not contain patterns aimed at overriding agent safety constraints or extracting system prompts.\n- [DATA_EXFILTRATION]: No network-enabled commands or patterns indicating the exfiltration of sensitive data were found. The skill operates entirely within the local project context.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 08:10 PM
Security Audit — agent-trust-hub — wp-block-development