wp-patterns

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local scripts, specifically detect_wp_project.mjs and detect_block_themes.mjs, to identify the project root and theme directories during the initial triage phase. These are environment discovery tools intended to scope the agent's actions to the correct directories.- [EXTERNAL_DOWNLOADS]: Verification instructions suggest using the @wp-playground/cli package from the npm registry. This tool is a standard utility within the WordPress ecosystem for running ephemeral testing environments.- [REMOTE_CODE_EXECUTION]: The skill instructs the use of npx to execute the WordPress Playground CLI. This allows for automated mounting of the theme directory and verification of pattern validity in a real WordPress instance. This is consistent with modern WordPress development workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 01:27 PM
Security Audit — agent-trust-hub — wp-patterns