filesystem-security
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides robust defensive patterns for filesystem operations in WordPress, correctly emphasizing the use of built-in security functions like validate_file(), sanitize_file_name(), and wp_normalize_path().
- [SAFE]: It demonstrates best practices for directory containment using realpath() and explicit path prefix validation to prevent directory traversal attacks.
- [SAFE]: The skill explicitly warns against and provides secure alternatives to dangerous patterns such as using user input directly in include/require statements.
- [SAFE]: The references provided target official WordPress documentation, PHP manual, and OWASP, which are well-known and trusted sources.
Audit Metadata