Confirm the source
Compare the repository, publisher, and installation command before continuing.
!
Third-party audit
ReviewGen Agent Trust Hub
wp-block-themes · wordpress/agent-skills
Provider summary
The skill automates WordPress block theme development by executing local Node.js scripts and modifying theme files. While functional, it presents a medium risk of indirect prompt injection because it reads and processes external repository content like HTML templates and JSON configurations without explicit sanitization or boundary markers.
The provider classified the analyzed snapshot as MEDIUM risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- warn
- Risk level
- MEDIUM
- Audited
- Feb 17, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. Artificial Atlas never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.