wordpress-pro

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or obfuscation techniques were detected across the skill's instructions and reference files.
  • [SAFE]: The skill consistently implements and advocates for industry-standard security practices for WordPress development, including:
  • Nonce verification for state-changing requests.
  • Robust input sanitization (sanitize_text_field, wp_kses_post).
  • Universal output escaping (esc_html, esc_url, esc_attr).
  • Use of prepared statements ($wpdb->prepare) for all database operations.
  • Mandatory capability checks (current_user_can) before privileged actions.
  • [SAFE]: External dependencies referenced (such as @wordpress/scripts) are official, well-known development tools maintained by the WordPress core team.
  • [SAFE]: The database backup and update checker examples are provided for educational purposes and include built-in security measures like directory protection and placeholder URLs.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 04:40 PM
Security Audit — agent-trust-hub — wordpress-pro