wp-wpcli-and-ops
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a utility script
scripts/wpcli_inspect.mjsthat usesnode:child_process.spawnSyncto executewp(WP-CLI) commands. This is used for environment discovery and validation. The execution uses array-based arguments, which is a secure practice to prevent shell injection. - [SAFE]: The skill places a heavy emphasis on operational safety. It includes a dedicated
references/safety.mdfile and multiple instructions requiring the agent to confirm the environment (development vs. production), perform database backups (wp db export), and use--dry-runflags for destructive operations likesearch-replace. - [SAFE]: No unauthorized network operations, data exfiltration patterns, or hardcoded credentials were found. The skill operates locally on the provided WordPress path using the existing environment's WP-CLI installation.
- [SAFE]: The automation and scripting guidelines provided in
references/automation.mdpromote best practices such as usingset -euo pipefailin shell scripts to ensure execution stops on errors.
Audit Metadata