wp-rest-api
Warn
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands including curl, jq, grep, and diff to interact with WordPress APIs and verify changes.
- [DYNAMIC_EXECUTION]: The skill facilitates the creation and execution of dynamic code blocks. It instructs the agent to generate PHP and JavaScript code which is then transmitted to the WordPress server for execution via the Code Snippets plugin API.
- [REMOTE_CODE_EXECUTION]: The primary functionality of the skill is to push and activate executable snippets on a remote WordPress instance. This creates a risk of site instability or unauthorized code execution if misused, although the skill includes extensive safety guidelines and recovery procedures.
- [PRIVILEGE_ESCALATION]: The skill provides instructions for the agent to install and activate WordPress plugins via the /wp/v2/plugins endpoint, which allows for significant changes to the remote environment security posture.
- [EXTERNAL_DOWNLOADS]: The skill references external assets such as the GSAP library from Cloudflare CDN (cdnjs.cloudflare.com) and other agent skills or plugins from the author marketplace repositories (nathanonn/agent-skills).
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the remote WordPress site. While it uses jq for structured parsing, a compromised WordPress site could potentially supply data intended to influence agent behavior through these ingestion points.
Audit Metadata