Skills
Navigate
skills/firecrawl/agent-skills/wp-rest-api/Gen Agent Trust Hub

wp-rest-api

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and processing of data from WordPress REST API requests, which are controlled by external clients.
  • Ingestion points: Data enters the agent's context through WP_REST_Request objects and REST endpoint callbacks defined in SKILL.md and references/routes-and-endpoints.md.
  • Boundary markers: The skill recommends using JSON Schema and rest_validate_value_from_schema to define and enforce data boundaries.
  • Capability inventory: The skill environment permits the execution of shell commands (WP-CLI), bash scripts, and Node.js scripts.
  • Sanitization: The instructions explicitly direct the agent to implement sanitize_callback and use WordPress's built-in schema sanitization functions to clean untrusted input.
  • [COMMAND_EXECUTION]: The triage procedure instructs the agent to execute a local script located at skills/wp-project-triage/scripts/detect_wp_project.mjs using Node.js and notes that some workflows require the use of the WP-CLI command-line tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:53 PM
Security Audit — agent-trust-hub — wp-rest-api