wp-patterns
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local Node.js scripts (
detect_wp_project.mjsanddetect_block_themes.mjs) for automated environment triage. These are routine utility scripts for project discovery. - [EXTERNAL_DOWNLOADS]: Recommends verification using
@wp-playground/cli, which is a well-known and official tool provided by the WordPress project for local development and testing. - [PROMPT_INJECTION]: The skill incorporates robust defensive instructions, mandating that all generated PHP output must be escaped using WordPress security functions (
esc_html_e,esc_attr_e,esc_url). This proactive measure mitigates the risk of XSS or other injections in the generated code.
Audit Metadata