wp-requirements-to-goals
Warn
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages a multi-phase generation workflow using shell commands.\n
- Evidence: Uses
mvandrm -rffor atomic file operations and cleanup of temporary staging directories.\n - Evidence: Executes
chmod +xon the generatedrun-goals.shscript to enable its execution.\n- [REMOTE_CODE_EXECUTION]: The skill generates scripts and configurations that execute external commands.\n - Evidence: Produces a
run-goals.shbash script that executescodex execto drive the autonomous implementation of goals.\n - Evidence: The generated script defaults to a high-privilege sandbox mode (
danger-full-access) to accommodate Docker and network access.\n- [EXTERNAL_DOWNLOADS]: The skill references and installs tools from external sources.\n - Evidence: Instructs users to install
@playwright/cliand@openai/codexvia global NPM installation.\n - Evidence: References WordPress plugin ZIP files (e.g., WooCommerce) for installation in the
wp-envenvironment.\n- [PROMPT_INJECTION]: The skill processes external requirements files to generate project artifacts.\n - Ingestion points:
requirements.md,notes/directory.\n - Boundary markers: Employs a specific 'sanitizer' protocol to detect and block platform-specific tokens and destructive commands.\n
- Capability inventory: File system writes, shell command generation, and script execution via
run-goals.sh.\n - Sanitization: Filters for Claude Code references, destructive shell tokens (
wp plugin uninstall,DROP TABLE), and absolute host paths.
Audit Metadata