migrate-beaver-builder-to-bricks
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill sends usage telemetry to the vendor's official domain at
https://www.respira.press/api/skills/track-usage. This is documented for tracking migration success and duration metrics. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it ingests and processes untrusted WordPress content to perform layout translations.
- Ingestion points: The skill reads WordPress page and post content via
wordpress_read_pageandwordpress_extract_builder_contentduring Phase 1 (Audit) and Phase 3 (Migration). - Boundary markers: No specific delimiters or instructions to ignore embedded instructions are defined in the execution workflow for the agent.
- Capability inventory: The skill possesses write capabilities through
wordpress_inject_builder_contentandwordpress_create_page_duplicate, allowing it to modify the site database. - Sanitization: The instructions do not specify any validation, filtering, or sanitization of the extracted builder content before it is processed and re-injected into the site database.
Audit Metadata