wp-block-development

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
12
Flagged
12
Chunks
12
Flagged Files (12)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: wp-block-development description: "Use when developing WordPress (Gutenberg) blocks: block.json metadata, register_block_type(_from_metadata), attributes/serialization, supports, dynamic rendering (render.php/render_callback), deprecations/migrations, viewScript vs viewScriptModule, and @wordpress/scripts/@wordpress/create-block build and test workflows." compatibility: "Targets WordPress 6.9+ (PHP 7.2.24+). Filesystem-based agent with bash + node. Some work

references/attributes-and-serialization.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/attributes-and-serialization.md Description: # Attributes and serialization Use this file when attributes aren’t saving, content becomes “Invalid block”, or you’re changing markup.

references/block-json.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/block-json.md Description: # `block.json` (metadata) guidance Use this file when you’re editing `block.json` fields or choosing between script/styles fields.

references/creating-new-blocks.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/creating-new-blocks.md Description: # Creating new blocks (scaffolding) Use this file when you are creating a new block (or a new block plugin) from scratch.

references/debugging.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/debugging.md Description: # Debugging quick routes ## Block doesn’t appear in inserter - Confirm `block.json` `name` is valid and the block is registered.

references/deprecations.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/deprecations.md Description: # Deprecations and migrations Use this file when you must change saved markup or attribute shapes without breaking existing content.

references/dynamic-rendering.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/dynamic-rendering.md Description: # Dynamic blocks (server rendering) Use this file when converting a block to dynamic, or debugging frontend output mismatch.

references/inner-blocks.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/inner-blocks.md Description: # Inner Blocks (nested blocks) Use this file when your block contains other blocks (container blocks).

references/registration.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/registration.md Description: # Registration patterns (PHP-first) Use this file when you need to register blocks robustly across repo types (plugin/theme/site).

references/supports-and-wrappers.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/supports-and-wrappers.md Description: # Supports and wrapper attributes Use this file when changing `supports` or when your block wrapper styling behaves unexpectedly.

references/tooling-and-testing.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tooling-and-testing.md Description: # Tooling and testing Use this file when deciding what commands to run and what “good verification” looks like.

scripts/list_blocks.mjsHIGH
78.3%

Malicious tool definition detected

Tool: scripts/list_blocks.mjs Description: import fs from "node:fs"; import path from "node:path"; const DEFAULT_IGNORES = new Set([ ".git", "node_modules", "vendor", "dist", "build", "coverage", ".next", ".turbo", ]); function statSafe(p) { try { return fs.statSync(p); } catch { return null; } } function existsDir(p) { const st = statSafe(p); return Boolean(st && st.isDirectory()); } function readJsonSafe(p) { try { return JSON.parse(fs.readFileSync(p, "utf8")); } catch { return null; } } funct

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
12
Files Flagged
12
Chunks Analyzed
12
Analyzed
Feb 22, 2026, 07:51 AM
Security Audit — runlayer — wp-block-development