migrate-elementor-to-bricks
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a suite of legitimate WordPress MCP tools (e.g.,
wordpress_inject_builder_content,wordpress_create_page_duplicate) to perform migration tasks. All operations are performed on duplicate pages, preserving the integrity of the original site data. - [DATA_EXFILTRATION]: The skill sends fire-and-forget telemetry data to the author's official domain (
https://www.respira.press/api/skills/track-usage). This data includes non-sensitive usage metrics such as skill slug, page counts, and success status, which is standard behavior for vendor-provided tools. - [DATA_EXPOSURE]: This skill possesses an indirect prompt injection surface as it ingests and processes JSON widget trees from external WordPress post meta (
_elementor_data). - Ingestion points:
wordpress_extract_builder_contentreads Elementor data from the database into the agent context. - Boundary markers: The skill explicitly instructs the agent to generate a "Migration Plan" for human approval before performing any write operations, acting as a manual security boundary.
- Capability inventory: Writing capabilities are limited to creating duplicates (
wordpress_create_page_duplicate) and injecting builder content (wordpress_inject_builder_content). - Sanitization: The skill processes structured JSON trees and maps them to predefined Bricks elements, reducing the risk of arbitrary instruction execution.
Audit Metadata