Skills
Navigate
skills/wpgaurav/wordpress-skills/wp-rest-api/Gen Agent Trust Hub

wp-rest-api

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive instructions for secure WordPress development, explicitly requiring the implementation of permission_callback for authorization and sanitize_callback for input validation.
  • [COMMAND_EXECUTION]: The skill includes a step to run a local initialization script (node skills/wp-project-triage/scripts/detect_wp_project.mjs) to identify the WordPress project structure, which is a standard procedure for environment setup.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves processing untrusted data from HTTP requests through REST API endpoints.
  • Ingestion points: Data enters the context via WP_REST_Request as described in Procedure 3.
  • Boundary markers: The skill recommends defining args with validate_callback and using JSON Schema validation.
  • Capability inventory: The skill uses a local script for project triage; the resulting API code handles file and database operations typical of WordPress.
  • Sanitization: The skill explicitly mandates the use of sanitize_callback and rest_sanitize_value_from_schema to filter external content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 02:58 PM
Security Audit — agent-trust-hub — wp-rest-api