wp-interactivity-api
Audited by ZeroLeaks on Apr 15, 2026
The SKILL.md is clear, well-structured, and fully reviewable, with no hidden execution paths or embedded secrets detected. Instruction and data boundaries stay reasonably clean, and the skill does not push the agent to treat external content as trusted policy. Tested scenarios did not show material prompt-injection risk or skill-induced worsening of downstream behavior. Confidence is low not due to the file itself but because behavior analysis was not run, meaning there is no empirical confirmation of how the skill affects downstream agent actions compared to a no-skill baseline.
The scanned SKILL.md is materially reviewable, with no hidden execution path or secret-like content detected in the markdown.
The scanned skill keeps data and instructions reasonably separate and does not strongly encourage the agent to treat external content as policy.
Behavior analysis was not run.