etch-layouts
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured documentation and templates for generating layout JSON files for the Etch WordPress plugin. The instructions focus on output formatting, BEM naming conventions, and CSS variable usage consistent with modern web development practices.
- [INDIRECT_PROMPT_INJECTION]: The skill documentation identifies potential attack surfaces such as the
etch/raw-htmlandetch/svgblocks which handle external or raw content. However, the documentation explicitly notes the implementation of security controls, including WordPress'swp_kses()sanitization andesc_attr()for attribute escaping, to mitigate the risk of malicious payload execution. - [REMOTE_CODE_EXECUTION]: The skill mentions a local utility script
convert-to-etch.mjsfor bulk layout conversion and dynamic tag resolution within the WordPress plugin. These are documented architectural features of the target platform and do not constitute an instruction for the agent to execute untrusted code on the host system.
Audit Metadata