The Agent Skills Directory

[SAFE]: The skill relies on official WordPress and WP-CLI tools, including recommended packages like wp-cli/doctor-command and wp-cli/profile-command, which are standard, trusted utilities in the ecosystem.
[COMMAND_EXECUTION]: The helper script perf_inspect.mjs is designed to run WP-CLI commands through spawnSync using argument arrays rather than shell strings, ensuring protection against command injection vulnerabilities.
[DATA_EXFILTRATION]: No evidence of data exfiltration was found. The skill collects performance metrics locally for diagnostic purposes and does not communicate with any unauthorized external servers.
[METADATA_POISONING]: The skill mentions future WordPress versions (e.g., WP 7.0) and dates in 2025. These are non-deceptive placeholders that do not affect the security or integrity of the agent's operations.

wp-performance