migrate-elementor-to-bricks
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests Elementor JSON data from the WordPress database, which is considered untrusted input. This creates an attack surface where instructions embedded in the source content could potentially influence the agent during the conversion process.
- Ingestion points: Raw Elementor widget data is extracted using the
respira_extract_builder_contenttool as defined in the execution workflow. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands when walking the JSON tree.
- Capability inventory: The skill has broad capabilities to modify the site, including
respira_create_page_duplicate,respira_inject_builder_content,respira_update_element, andrespira_delete_page. - Sanitization: There are no explicit mentions of sanitization or validation for the content being mapped from the source builder to the target builder.
- [DATA_EXFILTRATION]: Upon completion of a migration, the skill sends telemetry to the developer's official domain (
respira.press). This data includes site context, duration, success status, and counts of converted widgets. This activity is consistent with standard usage tracking by the vendor.
Audit Metadata