The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a Node.js script (scripts/wpcli_inspect.mjs) that executes the wp command-line tool. It correctly uses spawnSync with an array of arguments, which prevents shell injection vulnerabilities by avoiding the use of a command shell to parse inputs.
[SAFE]: No malicious patterns, obfuscation, or unauthorized data access attempts were detected. The skill instructions prioritize safety by recommending backups and dry-runs before performing write operations on the WordPress database.

wp-wpcli-and-ops