OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass4 providerslatest audit Mar 5, 2026
Independent checks from skills.sh's audit partners.
The skill is safe and provides tools for WordPress plugin development. It includes a script to detect plugins by scanning file headers. This scanning process creates a minor surface for indirect prompt injection if a project contains malicious metadata in its PHP files.
Detected behaviors
No alerts
No issues
4/8 files flagged