skills/soderlind/skills/wp-mutate/Gen Agent Trust Hub

wp-mutate

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local development tools, including PHP and Node.js binaries, to detect the project environment and run mutation tests. It uses a bundled script, detect_mutation_setup.mjs, which safely probes the system for installed extensions and configuration files using static command strings.
  • [SAFE]: The skill provides explicit security-positive instructions, such as prioritizing the triage of 'security-control survivors' (e.g., failed mutations in current_user_can or wp_verify_nonce calls). It implements multiple 'hard gates' that require human confirmation before the agent modifies any files or runs long-running processes.
  • [SAFE]: Analysis of the source code and instructions reveals no evidence of prompt injection, obfuscation, or unauthorized network activity. External resource references (like StrykerJS or Pest) are restricted to official, well-known package registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 11:02 AM
Security Audit — agent-trust-hub — wp-mutate