wordpress-pro
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or obfuscation techniques were detected across the skill's instructions and reference files.
- [SAFE]: The skill consistently implements and advocates for industry-standard security practices for WordPress development, including:
- Nonce verification for state-changing requests.
- Robust input sanitization (
sanitize_text_field,wp_kses_post). - Universal output escaping (
esc_html,esc_url,esc_attr). - Use of prepared statements (
$wpdb->prepare) for all database operations. - Mandatory capability checks (
current_user_can) before privileged actions. - [SAFE]: External dependencies referenced (such as
@wordpress/scripts) are official, well-known development tools maintained by the WordPress core team. - [SAFE]: The database backup and update checker examples are provided for educational purposes and include built-in security measures like directory protection and placeholder URLs.
Audit Metadata