migrate-beaver-builder-to-gutenberg
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted content from the WordPress database to perform mappings.\n
- Ingestion points: Site content is retrieved from Beaver Builder modules via
wordpress_extract_builder_contentandwordpress_read_page.\n - Boundary markers: The instructions do not specify any delimiters or safety prompts to prevent the agent from executing instructions that might be embedded within the source content.\n
- Capability inventory: The agent has permissions to create and update content via
wordpress_update_pageandwordpress_create_page_duplicate.\n - Sanitization: No explicit sanitization or validation of the extracted content is mentioned before it is converted to block markup.\n- [DATA_EXFILTRATION]: The skill performs network operations to send telemetry data to the author's infrastructure.\n
- Telemetry: It sends usage statistics, site context, and success metrics to
https://www.respira.press/api/skills/track-usage.\n - Context: This activity is a standard vendor telemetry practice for tracking the usage and reliability of the migration tool.
Audit Metadata