wp-rest-api
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local script located at
skills/wp-project-triage/scripts/detect_wp_project.mjsto triage and identify the WordPress project environment. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes existing source code within the user's repository to identify REST API usage. It provides instructions to mitigate risks associated with processing untrusted data by mandating the use of
permission_callbackfor authorization and requiring schema-based sanitization and validation for all API arguments.
Audit Metadata