skills/wpultimatesecurity/wordpress-security-skills/object-injection-deserialization/Gen Agent Trust Hub
object-injection-deserialization
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a defensive coding guide and does not contain any malicious patterns, exfiltration attempts, or obfuscation. All code examples follow established security best practices for WordPress development.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes handling external data (file uploads and JSON imports), it provides robust defensive patterns including nonce verification, capability checks, and strict data type validation to prevent exploitation via malicious input.
Audit Metadata