php-wordpress

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [GENERAL] (SAFE): The skill documentation and metadata are consistent with its stated purpose of WordPress development assistance. No prompt injection or behavior override patterns were detected.
  • [COMMAND_EXECUTION] (SAFE): The script scripts/validate.py performs structure and configuration validation using standard library functions (os.path, pathlib, json) and yaml.safe_load. It does not execute external shell commands or arbitrary user-provided code.
  • [EXTERNAL_DOWNLOADS] (SAFE): No remote resources are downloaded or executed. Dependencies are limited to standard libraries and PyYAML.
  • [DATA_EXFILTRATION] (SAFE): No patterns of sensitive file access or network communication were found. The skill does not access credentials or private user data.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:01 PM