rp-source-wordpress
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure credential management by using a dedicated environment file (
source.wordpress.env). It includes explicit instructions for the AI agent to avoid printing or echoing the contents of this file, mitigating the risk of accidental secret exposure in logs or outputs. - [EXTERNAL_DOWNLOADS]: The documentation references
ngrok, a well-known tunneling service, providing clear instructions for its use in exposing local WordPress instances during migration. This is documented as a standard tool for the migration workflow. - [DATA_INGESTION_SURFACE]: The skill's discovery script (
wp-discovery.js) fetches data from WordPress REST API endpoints. It employs safe handling of this external data by usingJSON.stringifyto wrap sampled content within markdown code blocks, effectively isolating untrusted data and reducing the risk of indirect prompt injection. - [COMMAND_EXECUTION]: The skill uses local Node.js scripts for data discovery. These scripts are dependency-free and rely on standard Node.js built-in modules (
node:fs,node:path), ensuring a verifiable and restricted execution environment.
Audit Metadata