wp-plugin-dev
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user requirements from the 'Gather requirements' step to generate plugin functionality. It implements strong mitigation strategies by mandating security guardrails, such as sanitization and late escaping, in the 'Security
- Non-Negotiable' section and 'references/security.md'.
- [DYNAMIC_EXECUTION]: The primary function of this skill is the generation of PHP scripts and directory structures. It follows strict modular architecture patterns defined in 'references/architecture.md' to ensure the generated code is secure and compliant with WordPress.org guidelines.
- [COMMAND_EXECUTION]: The skill documentation references standard Node.js development commands, including 'npm install' and 'npm run build', specifically for compiling Gutenberg block assets. This behavior is consistent with the intended purpose of facilitating modern WordPress development.
Audit Metadata