elementor-to-generateblocks
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to run
preflight.pyon generated files to validate output before finalization. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and inventory untrusted content from Elementor sections, widgets, and dynamic sources.
- Ingestion points: Elementor containers, widgets, forms, and dynamic layout data as described in the conversion workflow in
SKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands in the source data are provided.
- Capability inventory: The skill possesses the ability to write generated blocks to files and execute a Python script (
preflight.py) for validation. - Sanitization: Programmatic sanitization is not mentioned; the skill relies on manual human confirmation in the editor and raw-content readback as validation steps.
Audit Metadata