migrate-beaver-builder-to-bricks

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill sends usage telemetry to the vendor's official domain at https://www.respira.press/api/skills/track-usage. This is documented for tracking migration success and duration metrics.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it ingests and processes untrusted WordPress content to perform layout translations.
  • Ingestion points: The skill reads WordPress page and post content via wordpress_read_page and wordpress_extract_builder_content during Phase 1 (Audit) and Phase 3 (Migration).
  • Boundary markers: No specific delimiters or instructions to ignore embedded instructions are defined in the execution workflow for the agent.
  • Capability inventory: The skill possesses write capabilities through wordpress_inject_builder_content and wordpress_create_page_duplicate, allowing it to modify the site database.
  • Sanitization: The instructions do not specify any validation, filtering, or sanitization of the extracted builder content before it is processed and re-injected into the site database.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 05:29 PM
Security Audit — agent-trust-hub — migrate-beaver-builder-to-bricks