ajax-security
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard security best practices for handling WordPress AJAX requests through admin-ajax.php.
- [SAFE]: The sample implementation in secure-ajax-handler.php correctly demonstrates the use of check_ajax_referer() for CSRF protection and current_user_can() for authorization.
- [SAFE]: The instructions emphasize the necessity of unslashing and sanitizing all user-supplied data (e.g., from $_POST) before use, which is a key defense against injection attacks.
- [SAFE]: The skill includes documentation on avoiding common anti-patterns such as missing nonces, incorrect hook usage, and improper output escaping.
- [SAFE]: No obfuscation, remote code execution, or unauthorized data exfiltration patterns were detected. All external references point to official WordPress documentation or established security organizations (OWASP).
Audit Metadata