wp-cli
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute standard WP-CLI commands for WordPress administration, including core updates, plugin management, and database operations.
- [EXTERNAL_DOWNLOADS]: Includes instructions to install the
wp-cli/doctor-commandpackage. This is a well-known, official command for the WP-CLI ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data such as plugin slugs, media URLs, and post content. While it possesses powerful capabilities like user creation and database modification, these are the primary functions of the tool, and the skill includes specific instructions to minimize risk, such as confirming destructive actions and using dry-run flags.
- [CREDENTIALS_SAFE]: The skill correctly instructs users to avoid hardcoding secrets in commands, recommending the use of environment variables or interactive prompts to handle sensitive information like database passwords.
Audit Metadata