wp-interactivity-api

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
4
Flagged
4
Chunks
4
Flagged Files (4)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: wp-interactivity-api description: "Use when building or debugging WordPress Interactivity API features (data-wp-* directives, @wordpress/interactivity store/state/actions, block viewScriptModule integration, wp_interactivity_*()) including performance, hydration, and directive behavior." compatibility: "Targets WordPress 6.9+ (PHP 7.2.24+).

references/debugging.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/debugging.md Description: # Debugging checklist 1.

references/directives-quickref.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/directives-quickref.md Description: # Directives quick reference (high level) Common directives to recognize in markup: - `data-wp-interactive`: declares an interactive region (and often a store namespace).

references/server-side-rendering.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/server-side-rendering.md Description: # Server-Side Rendering for Interactivity API - **Faster initial render**: HTML arrives ready with correct values.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
4
Files Flagged
4
Chunks Analyzed
4
Analyzed
Feb 21, 2026, 02:10 PM
Security Audit — runlayer — wp-interactivity-api