OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill is a WordPress repository triage tool that uses a local Node.js script to inspect files and generate structured reports. It presents a low-severity risk of indirect prompt injection as it processes untrusted project data (e.g., theme.json, block.json) from the repository being analyzed.
Detected behaviors
No alerts
No issues
3/3 files flagged
Score: 93/100 · 2 sections analyzed