migrate-elementor-to-breakdance
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill sends usage tracking data to
https://www.respira.press/api/skills/track-usage. This telemetry includes site and version context, which may disclose information about the user's WordPress installation environment to the author's external server. - [PROMPT_INJECTION]: The skill processes complex external data structures which create a surface for indirect prompt injection attacks.
- Ingestion points: The skill reads the Elementor widget tree (
_elementor_datapost meta) from the WordPress database using thewordpress_extract_builder_contenttool. - Boundary markers: The instructions lack explicit delimitation or instructions for the agent to ignore or isolate potentially malicious instructions embedded within the source page content during the mapping process.
- Capability inventory: The skill possesses powerful content modification capabilities, including creating new pages (
wordpress_create_page_duplicate) and injecting arbitrary content into the site database (wordpress_inject_builder_content). - Sanitization: No specific sanitization, schema validation, or content filtering logic is described for the incoming JSON-based content before it is processed and translated into the target builder's format.
Audit Metadata