wp-block-development

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill employs standard WordPress development tools and best practices for Gutenberg block creation.
  • [COMMAND_EXECUTION]: Utilizes local helper scripts detect_wp_project.mjs and list_blocks.mjs to automate discovery within the user's workspace.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: Interacts with repository files including block.json, PHP render templates, and JavaScript source files.
  • Boundary markers: No specific delimiters or safety instructions for processing untrusted repository content are noted.
  • Capability inventory: Can execute local scripts and NPM-based build tools.
  • Sanitization: Content is processed directly from the filesystem without explicit sanitization steps mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 02:58 PM
Security Audit — agent-trust-hub — wp-block-development