wp-env
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands to install dependencies and manage Docker containers, including 'npm install', 'wp-env start', and 'wp-env run cli'.
- [EXTERNAL_DOWNLOADS]: The environment configuration permits fetching plugins and themes from remote sources such as 'downloads.wordpress.org' and GitHub. These are expected downloads from well-known repositories associated with the author's ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill relies on untrusted data from the project's environment. * Ingestion points: The agent reads '.wp-env.json' and '.wp-env.override.json' from the local workspace to configure the environment (SKILL.md). * Boundary markers: No delimiters or instructions are provided to sanitize or check the integrity of the configuration files. * Capability inventory: The skill allows for recursive command execution (via 'lifecycleScripts'), file system mapping, and network downloads. * Sanitization: Missing validation for values provided in the JSON configuration files, which could lead to code execution if a malicious configuration is present in a repository.
Audit Metadata