wordpress-pro

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive and accurate security guidance for WordPress development. It includes detailed sections on hardening, SQL injection prevention using prepared statements, and CSRF protection via nonces.
  • [COMMAND_EXECUTION]: Provides documentation on using standard, official WordPress developer tools like npx @wordpress/create-block and wp-scripts for Gutenberg block development. These are established industry standards.
  • [EXTERNAL_DOWNLOADS]: Includes a reference implementation for a self-hosted plugin update checker. This is a common pattern for custom plugins and correctly uses WordPress APIs (wp_remote_get) for communication with a remote info server.
  • [DATA_EXPOSURE]: Includes a database backup implementation as a reference. The code includes security measures such as creating .htaccess files to prevent direct access to the backup directory, adhering to standard security practices for this functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 10:32 AM
Security Audit — agent-trust-hub — wordpress-pro