wp-abilities-api

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
3
Flagged
3
Chunks
3
Flagged Files (3)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: wp-abilities-api description: "Use when working with the WordPress Abilities API (wp_register_ability, wp_register_ability_category, /wp-json/wp-abilities/v1/*, @wordpress/abilities) including defining abilities, categories, meta, REST exposure, and permissions checks for clients." compatibility: "Targets WordPress 6.9+ (PHP 7.2.24+).

references/php-registration.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/php-registration.md Description: # PHP registration quick guide Key concepts and entrypoints for the WordPress Abilities API: - Register ability categories and abilities in PHP.

references/rest-api.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/rest-api.md Description: # REST API quick guide (`wp-abilities/v1`) The Abilities API exposes endpoints under the REST namespace: - `wp-abilities/v1/abilities`

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
3
Files Flagged
3
Chunks Analyzed
3
Analyzed
Feb 21, 2026, 02:10 PM
Security Audit — runlayer — wp-abilities-api