wp-block
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows established WordPress development patterns and security best practices.
- [COMMAND_EXECUTION]: The skill utilizes official WordPress scaffolding tools (npx @wordpress/create-block) and build scripts (@wordpress/scripts). These are legitimate development dependencies used as intended for project setup and build processes.
- [INDIRECT_PROMPT_INJECTION]: The provided code snippets for block rendering include proper output sanitization using WordPress functions like esc_html() and wp_kses_post(), mitigating common web vulnerabilities like Cross-Site Scripting (XSS).
Audit Metadata