wp-block-development
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a legitimate development environment for WordPress blocks, using standard Node.js scripts for project introspection and referencing official documentation.\n- [COMMAND_EXECUTION]: The skill includes a script (
scripts/list_blocks.mjs) that performs a recursive search forblock.jsonfiles within the working directory. This script uses standard filesystem APIs (fs.readdirSync,fs.readFileSync), implements depth limits, and ignores non-project directories likenode_modulesand.gitto ensure safe operation.\n- [EXTERNAL_DOWNLOADS]: Instructions within the skill recommend the use of official WordPress packages such as@wordpress/create-blockand@wordpress/scripts. These are standard, well-known development tools maintained by the WordPress community.\n- [PROMPT_INJECTION]: Instruction files use task-oriented language and do not contain patterns aimed at overriding agent safety constraints or extracting system prompts.\n- [DATA_EXFILTRATION]: No network-enabled commands or patterns indicating the exfiltration of sensitive data were found. The skill operates entirely within the local project context.
Audit Metadata