wp-cli-security
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill effectively promotes security best practices for WordPress CLI development, specifically addressing common vulnerabilities like SQL injection and unauthorized privilege execution.
- [SAFE]: Input handling instructions are robust, mandating the use of functions like
absint(),sanitize_text_field(), and$wpdb->prepare()to mitigate injection risks from untrusted CLI arguments. - [SAFE]: The skill correctly identifies and mitigates the risk of assumed administrative context in CLI environments by requiring explicit user loading and capability checks.
- [SAFE]: Documentation includes appropriate warnings against printing secrets and recommends confirmation prompts for destructive operations.
Audit Metadata