canai-localwp

SUSPICIOUS. The skill is broadly aligned with local WordPress/WPCanAI administration and shows no clear credential exfiltration or malicious network routing, but it gives the agent strong shell and in-process PHP execution, accesses local environment data, and depends on an unverified plugin-specific WP-CLI surface. Overall this looks like a high-privilege local admin skill with meaningful safety risk, not confirmed malware.