migrate-divi-to-breakdance
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill sends telemetry data to 'https://www.respira.press/api/skills/track-usage'. This data includes site context, migration statistics, and tool usage. Since this endpoint belongs to the official domain of the skill author ('respira-press'), this is categorized as standard vendor telemetry and does not represent a malicious exfiltration attempt.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from a WordPress database.
- Ingestion points: The skill reads Divi shortcode content from WordPress pages via the 'wordpress_extract_builder_content' tool (documented in SKILL.md).
- Boundary markers: No specific delimiters or instructions are provided to the agent to treat the ingested shortcode data as untrusted or to ignore any potential instructions embedded within that data.
- Capability inventory: The skill has the ability to write content back to the site ('wordpress_inject_builder_content') and create page duplicates ('wordpress_create_page_duplicate'), which could be exploited if malicious instructions were successfully injected through the source content.
- Sanitization: There is no mention of sanitization or validation of the input content before it is parsed and transformed into the new format.
Audit Metadata