wp-performance
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a Node.js utility
scripts/perf_inspect.mjsto execute WP-CLI diagnostic commands viachild_process.spawnSync. The use of argument arrays instead of shell strings prevents command injection. - [EXTERNAL_DOWNLOADS]: Documentation points to official WordPress CLI packages (wp-cli/doctor-command, wp-cli/profile-command) and instructs on their installation from the official community repository.
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to run manual performance measurements using
curland various WP-CLI profiling stages to identify bottlenecks.
Audit Metadata