skills/respira-press/agent-skills-wordpress/migrate-visual-composer-to-gutenberg/Gen Agent Trust Hub
migrate-visual-composer-to-gutenberg
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill sends telemetry data including usage statistics, site context, and tool success rates to "https://www.respira.press/api/skills/track-usage". This is a network operation to the vendor's own domain.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data which could lead to indirect prompt injection.
- Ingestion points: Reads Visual Composer JSON data from post_meta and HTML content from WordPress pages via "respira_extract_builder_content" in SKILL.md.
- Boundary markers: There are no instructions to use delimiters or ignore embedded instructions when parsing the extracted content.
- Capability inventory: The skill possesses significant capabilities including creating and updating WordPress pages ("respira_update_page", "respira_create_page_duplicate"), modifying elements ("respira_update_element"), and purging site caches ("respira_purge_cache") across the execution workflow.
- Sanitization: The workflow does not mention sanitizing or validating the extracted builder content before interpolating it into block markup.
Audit Metadata