skills/wpultimatesecurity/wordpress-security-skills/dependency-supply-chain-security/Gen Agent Trust Hub
dependency-supply-chain-security
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational resource for improving WordPress plugin security. It correctly identifies and provides mitigations for common supply-chain attack vectors.
- [EXTERNAL_DOWNLOADS]: References to external services such as JSDelivr for CDN assets and GitHub Actions for CI/CD workflows are used to illustrate secure integration techniques, including version pinning and integrity verification.
- [COMMAND_EXECUTION]: The documentation includes examples of using standard development and security tools like
composer auditandopenssl. These are presented in the context of security auditing and asset verification. - [DYNAMIC_EXECUTION]: The skill highlights the dangers of dynamic code execution (e.g.,
eval(), remote includes) and provides a secure implementation pattern for local file inclusion using strict allowlists and path validation.
Audit Metadata