The Agent Skills Directory

[COMMAND_EXECUTION]: Auditing scripts and system utilities like curl, git, and wp-cli are executed through Python's subprocess module. These commands are used for environment capability detection and site measurements, employing safe list-based argument handling.
[DATA_EXFILTRATION]: The skill performs outbound network requests to gather timing and asset data from target WordPress sites. It includes specific code in capabilities.py to identify the presence of environment variable names (e.g., API keys) without accessing or exposing their actual values.
[PROMPT_INJECTION]: The skill analyzes data from remote websites, which is treated as untrusted input. It provides clear instructions to ignore any instructions embedded in analyzed data and implements sanitization logic in perf-probe.py to block dangerous schemes like javascript:.
[EXTERNAL_DOWNLOADS]: Performance audits involve fetching site headers and assets. The skill uses curl and urllib with configured timeouts and byte-size limits to safely retrieve and size remote resources for the audit report.

wp-perf-audit