wp-block-development

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides documentation and patterns for WordPress block development, referencing official WordPress.org resources for best practices.
  • [COMMAND_EXECUTION]: The skill includes a diagnostic script scripts/list_blocks.mjs that traverses the local directory to find and summarize block.json files. This is a standard project discovery task designed to provide structural context to the agent.
  • [EXTERNAL_DOWNLOADS]: The instructions reference official WordPress packages (such as @wordpress/scripts and @wordpress/create-block) and documentation URLs from trusted domains including wordpress.org and npmjs.com. These are standard dependencies for the described workflow.
  • [INDIRECT_PROMPT_INJECTION]: The list_blocks.mjs script processes metadata from block.json files found in the repository. While this processes data from the environment, the script's logic is limited to safe metadata extraction for reporting purposes, posing a minimal risk to the agent's control flow.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 10:45 PM