wordpress-pro
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration attempts were detected. The skill primarily serves as a high-quality educational resource for WordPress developers.
- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted data ingestion points common in WordPress, such as post content, comments, and form submissions. It mitigates this risk by providing mandatory instructions for sanitization (
wp_kses_post,sanitize_text_field) and escaping (esc_html,esc_url), which are industry-standard defenses against injection attacks. - [REMOTE_CODE_EXECUTION]: The documentation mentions scaffolding tools like
@wordpress/create-blockand development dependencies like@wordpress/scripts. These are standard, well-known tools within the WordPress ecosystem and do not represent a security risk in this context.
Audit Metadata