build-elementor-page
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of design briefs, screenshots, mockups, or design files to generate Elementor page settings.
- Ingestion points: External designs and briefs are ingested as the source of truth for page building as described in the workflow.
- Boundary markers: The instructions lack explicit delimiters or warnings to ignore potential instructions embedded within the processed design text or mockups.
- Capability inventory: The skill uses tools like
respira_build_page,respira_upload_media,respira_inject_builder_content, andrespira_update_elementwhich have the capability to modify the content and configuration of a WordPress site. - Sanitization: There is no mention of sanitizing or escaping text content found within the designs before it is applied to the page widgets via the builder tools.
Audit Metadata