codebase-to-wordpress-converter
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external codebases (React, HTML, Next.js), which are considered untrusted data sources that could contain embedded malicious instructions.
- Ingestion points: External source code projects (React/HTML/Next.js) as described in the "Overview" and "When to Use This Skill" sections.
- Boundary markers: The instructions do not specify any boundary markers or "ignore embedded instructions" warnings to prevent the agent from following directions found within the source code.
- Capability inventory: The skill performs file read operations on the source codebase and presumably file write operations to generate the WordPress theme files (PHP, CSS, JS).
- Sanitization: No sanitization or validation steps are mentioned for the content being extracted from the source and interpolated into the WordPress theme files.
Audit Metadata