wp-plugin-automation
Warn
Audited by Socket on Jul 31, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is internally consistent with its red-team purpose, but that purpose is to give an AI agent offensive security capability for bulk external WordPress vulnerability discovery and PoC generation. No strong credential theft or malicious exfiltration is shown, yet the scalable exploit workflow and disabled TLS checks make it high security risk.
Confidence: 94%Severity: 90%
Audit Metadata