wp-block-themes

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
8
Flagged
8
Chunks
8
Flagged Files (8)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: wp-block-themes description: "Use when developing WordPress block themes: theme.json (global settings/styles), templates and template parts, patterns, style variations, and Site Editor troubleshooting (style hierarchy, overrides, caching)." compatibility: "Targets WordPress 6.9+ (PHP 7.2.24+).

references/creating-new-block-theme.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/creating-new-block-theme.md Description: # Creating a new block theme Use this file when you need to create a new block theme or convert a theme to block theme structure.

references/debugging.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/debugging.md Description: # Debugging block theme issues ## Styles not applying Fast checks: 1.

references/patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/patterns.md Description: # Patterns (filesystem patterns) Use this file when adding patterns that should be available in the inserter.

references/style-variations.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/style-variations.md Description: # Style variations (`styles/*.json`) Use this file when adding or debugging style variations.

references/templates-and-parts.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/templates-and-parts.md Description: # Templates and template parts Use this file when creating or editing HTML templates/parts.

references/theme-json.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/theme-json.md Description: # `theme.json` guidance Use this file when changing global settings/styles or per-block styling.

scripts/detect_block_themes.mjsHIGH
78.3%

Malicious tool definition detected

Tool: scripts/detect_block_themes.mjs Description: import fs from "node:fs"; import path from "node:path"; const DEFAULT_IGNORES = new Set([ ".git", "node_modules", "vendor", "dist", "build", "coverage", ".next", ".turbo", ]); function statSafe(p) { try { return fs.statSync(p); } catch { return null; } } function existsDir(p) { const st = statSafe(p); return Boolean(st && st.isDirectory()); } function readJsonSafe(p) { try { return JSON.parse(fs.readFileSync(p, "utf8")); } catch { return null; }

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
8
Files Flagged
8
Chunks Analyzed
8
Analyzed
Feb 22, 2026, 07:51 AM
Security Audit — runlayer — wp-block-themes