wordpress-router
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
nodeto execute an internal script (skills/wp-project-triage/scripts/detect_wp_project.mjs) to analyze the project directory. This is used for classification and routing purposes. - [INDIRECT_PROMPT_INJECTION]: The skill's triage process involves reading external and potentially untrusted files within a repository to determine project type and tooling.
- Ingestion points: Analyzes project files such as
package.json,composer.json,style.css, andtheme.jsonlocated in the repository root. - Boundary markers: No delimiters or safety instructions are specified to prevent the agent from interpreting content within these project files as instructions.
- Capability inventory: The skill possesses the ability to execute Node.js scripts and read files throughout the repository based on the triage results.
- Sanitization: There is no evidence of sanitization or filtering of project file content before it is processed by the triage logic.
Audit Metadata