migrate-oxygen-to-bricks
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill transmits operational telemetry to the developer's official endpoint at https://www.respira.press/api/skills/track-usage. This tracking includes site context, migration duration, success status, and page counts. This is recognized as a standard vendor-provided usage monitoring mechanism.\n- [COMMAND_EXECUTION]: The skill utilizes WordPress-specific tools to duplicate pages and inject builder content. This behavior is safe as it requires explicit user confirmation before execution and operates exclusively on page duplicates to protect the live site.\n- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it processes untrusted page content during the migration phase. \n
- Ingestion points: External data enters the agent context via wordpress_extract_builder_content, wordpress_read_page, and wordpress_read_post in SKILL.md.\n
- Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are defined for the ingested builder content.\n
- Capability inventory: The skill has content creation and modification capabilities via wordpress_inject_builder_content, wordpress_create_page_duplicate, and wordpress_create_post_duplicate in SKILL.md.\n
- Sanitization: There is no mention of sanitization or escaping of external content before it is transformed into Bricks JSON format.
Audit Metadata