wp-performance

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/perf_inspect.mjs executes wp commands via spawnSync to gather environment data and performance signals.\n
  • Evidence: Calls to spawnSync(\"wp\", args, ...) are used throughout scripts/perf_inspect.mjs to check installation status, core version, and option list data.\n- [EXTERNAL_DOWNLOADS]: The documentation suggests installing additional WP-CLI functionality from the official wp-cli organization repositories.\n
  • Evidence: Recommendations to run wp package install wp-cli/doctor-command and wp package install wp-cli/profile-command are found in references/wp-cli-doctor.md and references/wp-cli-profile.md respectively.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 03:16 AM
Security Audit — agent-trust-hub — wp-performance