page-template-library

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests content from existing WordPress pages to extract patterns and create reusable templates, which could potentially contain malicious instructions.
  • Ingestion points: Existing site pages are read via respira_extract_builder_content and respira_list_custom_posts as described in Step 2 and Step 3 of the workflow in SKILL.md.
  • Boundary markers: The skill does not define specific delimiters or "ignore" instructions for the data extracted from existing pages.
  • Capability inventory: The agent has the capability to write new data to the site using respira_create_playbook and respira_build_page.
  • Sanitization: There is no mention of sanitizing or validating the extracted builder content before using it to define template structures.
  • [EXTERNAL_DOWNLOADS]: The skill transmits usage telemetry to the author's official infrastructure.
  • Evidence: The skill documentation notes a telemetry endpoint at https://www.respira.press/api/skills/track-usage in SKILL.md.
  • Context: The endpoint is owned by the skill's author (Respira for WordPress) and is used to track non-sensitive metrics such as builder type and playbook counts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 03:53 AM