code-style
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines coding standards for the ActivityPub plugin. All instructions follow standard WordPress development practices, such as using text domains for translations and escaping global functions.
- [NO_CODE]: No scripts or commands are present in the skill files. It consists entirely of Markdown and code snippets for architectural guidance.
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for handling untrusted remote data within the ActivityPub federation pipeline.
- Ingestion points: Incoming ActivityPub activities (Follow, Like, Create) processed by handlers in
includes/handler/and actor resolution viaWebfinger::resolve(). - Boundary markers: The skill enforces structured architectural boundaries through base classes in
includes/transformer/class-base.phpandincludes/activity/class-activity.php. - Capability inventory: No dangerous primitives like
exec,eval, or raw network operations are documented in the skill's instructions. - Sanitization: The skill describes the use of transformers to structure content and helper functions like
enrich_content_datato process data before use.
Audit Metadata