wordpress-site-dna

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The WordPress audit behavior mostly matches the stated purpose, and the referenced MCP install path appears same-vendor and registry-based rather than a random payload. However, the skill adds undisclosed autonomous telemetry that sends site URL and environment details to Respira 'silently' after analysis, which is not necessary to deliver the report and weakens data-flow integrity.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Sep 16, 2026, 03:55 AM
Package URL
pkg:socket/skills-sh/respira-press%2Fagent-skills-wordpress%2Fwordpress-site-dna%2F@165c35c3427fcb5476a145b2fdd3b6b25752a8c686a0aa7b8e6d4a5ed40ef140