The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill documentation includes multiple sets of hardcoded credentials.
SKILL.md contains the username 'admin' and password 'admin123' for a local WordPress environment.
SKILL.md contains a literal password '@#s;v1#%1M$+' for a production FTP account (alfonso@csrdevelopment.com).
[COMMAND_EXECUTION]: Multiple Python scripts (wp-page.py and wp-seo.py) assemble shell commands using string formatting with user-controlled input (titles, slugs, content, metadata) and execute them via subprocess.run(..., shell=True). This creates a direct path for command injection on the host system or inside the WordPress container.
[COMMAND_EXECUTION]: SKILL.md provides documentation for destructive commands such as docker-compose down -v which resets the WordPress database, potentially leading to data loss if executed without proper user oversight.
[EXTERNAL_DOWNLOADS]: The skill includes workflows to download media from external sources (pexels.com, unsplash.com) and import them directly into a WordPress environment. While intended, this allows for the retrieval and execution of content from third-party sites.
[DATA_EXFILTRATION]: The skill facilitates transferring local files to a remote production server via FTP and sync scripts. Combined with the hardcoded credentials, this represents a significant risk for data exfiltration if the target environment is compromised.
[DATA_EXFILTRATION]: The documentation instructs the user to store API keys in plain-text hidden files in the root directory (/root/.pexels-api-key, /root/.unsplash-api-key), which are then accessed by shell commands, increasing the risk of credential leakage.

wordpress-admin