wordpress-pro
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and accurate security guidance for WordPress development. It includes detailed sections on hardening, SQL injection prevention using prepared statements, and CSRF protection via nonces.
- [COMMAND_EXECUTION]: Provides documentation on using standard, official WordPress developer tools like
npx @wordpress/create-blockandwp-scriptsfor Gutenberg block development. These are established industry standards. - [EXTERNAL_DOWNLOADS]: Includes a reference implementation for a self-hosted plugin update checker. This is a common pattern for custom plugins and correctly uses WordPress APIs (
wp_remote_get) for communication with a remote info server. - [DATA_EXPOSURE]: Includes a database backup implementation as a reference. The code includes security measures such as creating
.htaccessfiles to prevent direct access to the backup directory, adhering to standard security practices for this functionality.
Audit Metadata