The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a bash script scripts/collect-wp-health.sh that executes several wp (WP-CLI) commands to baseline the environment. These commands are used to list plugins, themes, and database metrics, which are standard operations for WordPress administration.
[EXTERNAL_DOWNLOADS]: The reference documentation in references/hardening.md and references/performance.md contains links to developer.wordpress.org and web.dev. These are established official repositories for technical guidance and do not represent a security risk.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from the local WordPress environment via CLI outputs. While this constitutes an attack surface for indirect prompt injection if the WordPress database contained malicious payloads, the skill's purpose is specifically for security auditing and remediation, and the ingestion is handled through standard command-line tools.

wordpress-security-performance