wp-prepare

SUSPICIOUS: the core WordPress scaffolding behavior is coherent and there is no clear credential theft or covert exfiltration, but the skill’s footprint extends into transitive installation of additional agent skills via a third-party CLI. That trust expansion is disproportionate compared with simple project setup and is the main driver of risk; otherwise the remaining installs and file edits look consistent with the stated purpose.