wordpress
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use WP-CLI for site management, configuration, and database operations.
- Examples include commands such as
wp core download,wp config create,wp db export, andwp user create. - Shell-based Docker commands are provided for local environment setup:
docker run -d --name wordpress -p 8080:80. - [EXTERNAL_DOWNLOADS]: The skill automates the retrieval of WordPress core software and plugins from official sources.
- WP-CLI downloads content from the official WordPress.org repositories (
wp core download,wp plugin install). - The installation section references the official
wordpress:latestimage from Docker Hub. - [DATA_EXFILTRATION]: A custom WooCommerce REST API endpoint example uses
permission_callback => __return_true, which allows unauthenticated access to site product data. - The endpoint exposes product IDs, names, and prices to any unauthenticated caller.
Audit Metadata