wp-block-themes
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted WordPress theme files which could potentially contain malicious instructions targeting the agent.
- Ingestion points: The skill reads various theme-related files including
theme.json, templates (templates/*.html), template parts (parts/*.html), and patterns (patterns/*.php). - Boundary markers: Absent. There are no instructions to use delimiters or ignore embedded instructions within the processed theme files.
- Capability inventory: The skill utilizes Node.js script execution (
node) and file system access to modify templates and styles. - Sanitization: Absent. No specific validation or escaping mechanisms are described for the content ingested from the theme files.
- [COMMAND_EXECUTION]: The skill executes local scripts to perform environment detection and project triage.
- Evidence: Calls
node skills/wp-project-triage/scripts/detect_wp_project.mjsandnode skills/wp-block-themes/scripts/detect_block_themes.mjsduring the triage and detection phase.
Audit Metadata