wp-rest-api
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides security-conscious instructions for WordPress development, explicitly recommending the use of
permission_callbackfor authorization andsanitize_callbackfor input validation. - [COMMAND_EXECUTION]: The skill instructs the agent to run a local script (
node skills/wp-project-triage/scripts/detect_wp_project.mjs) to detect the WordPress environment. This is a standard initialization procedure for this category of skill and does not involve remote code or untrusted input. - [DATA_EXPOSURE_EXFILTRATION]: No sensitive file access or unauthorized network operations were detected. The mentioned source URL is the official repository for WordPress agent skills.
- [PROMPT_INJECTION]: The instructions do not contain any patterns attempting to override agent behavior, bypass safety filters, or extract system prompts.
Audit Metadata