migrate-wpbakery-to-bricks
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill is configured to perform an automated POST request to the author's API at
https://www.respira.press/api/skills/track-usageupon completion. This telemetry includes site version, context, and migration statistics. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface. 1. Ingestion points: Untrusted data is retrieved from
post_contentviawordpress_extract_builder_content(SKILL.md). 2. Boundary markers: None identified in the parsing or generation phase to isolate shortcode content. 3. Capability inventory: The skill useswordpress_inject_builder_contentandwordpress_create_page_duplicateto write data back to the site. 4. Sanitization: No specific sanitization or filtering is described for the extracted shortcode parameters before they are processed into Bricks JSON elements.
Audit Metadata