Skills
Navigate
skills/uphiago/recon-skills/wp-plugin-rest-auth-bypass/Gen Agent Trust Hub

wp-plugin-rest-auth-bypass

Fail

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using curl and python3 to interact with remote WordPress installations.
  • [REMOTE_CODE_EXECUTION]: An automated scan identified a high-risk pattern curl ... | python3 in the procedure section. While the implementation uses python3 -c to execute a provided string, this pattern is often used to pipe remote scripts into an interpreter, posing a risk if the target URL or the command structure is manipulated.
  • [DATA_EXFILTRATION]: The skill's primary function is to identify and exploit 'data leakage' and 'unauthorized access' to information. It specifically targets the extraction of route maps, plugin configurations, and sensitive settings from remote WordPress sites.
  • [PROMPT_INJECTION]: The skill ingests untrusted data from remote WordPress REST API endpoints, creating an indirect prompt injection surface.
  • Ingestion points: REST API endpoints via curl and requests in SKILL.md.
  • Boundary markers: None present.
  • Capability inventory: curl, python3, and the requests library for network operations and script execution.
  • Sanitization: None; the code processes and prints data directly from remote JSON responses.
Recommendations
  • HIGH: Downloads and executes remote code from: https://target.com/wp-json/ - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Jul 31, 2026, 04:47 PM
Security Audit — agent-trust-hub — wp-plugin-rest-auth-bypass