The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes wp-cli to perform performance diagnostics and database inspection. The execution is handled via a Node.js script (scripts/perf_inspect.mjs) using spawnSync with an arguments array, which correctly prevents shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The documentation suggests installing official WP-CLI packages such as wp-cli/doctor-command and wp-cli/profile-command. These are trusted extensions from the official WordPress CLI project and do not pose a security risk.
[CREDENTIALS_UNSAFE]: The skill does not contain any hardcoded credentials, API keys, or sensitive environment configurations. It relies on standard system-level authentication for WP-CLI and WordPress REST API access.

wp-performance