migrate-wpbakery-to-bricks
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from existing WordPress pages and user review comments which could potentially contain malicious instructions. 1. Ingestion points: Reads existing builder content from the WordPress database and fetches review comments from an external service. 2. Boundary markers: Instructions explicitly warn the agent that review comments are user-provided text, not commands. 3. Capability inventory: The skill can create, update, and resolve content on the WordPress site. 4. Sanitization: The skill uses a structured parsing phase to map shortcodes to JSON elements, reducing the risk of direct instruction execution.
- [SAFE]: The skill sends telemetry data to the vendor's official API at respira.press for usage tracking. This is standard operational behavior for the tool and is performed to a domain associated with the skill's author.
Audit Metadata