wordpress-plugin-directory-playbook
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides templates and instructional guidance for the WordPress.org plugin submission process. It does not execute code, perform network operations, or access sensitive files.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface by prompting users to paste external content such as plugin review emails. Ingestion points: Question 4 in the Interview section of SKILL.md asks the user to paste review emails. Boundary markers: None are present. Capability inventory: The skill instructions focus on text-based guidance and do not require or use tools for shell execution, file system modification, or network requests. Sanitization: No sanitization is performed on the ingested content.
Audit Metadata