The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Fetches the official WP-CLI Phar binary from its public GitHub repository to enable WordPress management.
[COMMAND_EXECUTION]: Uses sudo to move the downloaded tool into a standard system binary directory (/usr/local/bin) for global access.
[COMMAND_EXECUTION]: Configures SSH connections with StrictHostKeyChecking=no to automate remote access, which skips manual host identity verification.
[EXTERNAL_DOWNLOADS]: Dynamically installs the wp-cli/ssh-command package from the official WP-CLI package registry.
[PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it retrieves and displays data (such as post titles and user lists) from external WordPress sites which could contain instructions intended to influence the agent.
Ingestion points: Data retrieved via wp post list and wp user list commands in SKILL.md and references/wp-cli-essentials.md.
Boundary markers: Not present; the data is directly rendered in the output.
Capability inventory: Shell command execution via wp and ssh, as well as file modification capabilities for configuration files.
Sanitization: No explicit filtering or validation is performed on the content retrieved from the WordPress site.

wordpress-setup