wp-phpstan

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
5
Flagged
5
Chunks
5
Flagged Files (5)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: wp-phpstan description: "Use when configuring, running, or fixing PHPStan static analysis in WordPress projects (plugins/themes/sites): phpstan.neon setup, baselines, WordPress-specific typing, and handling third-party plugin classes." compatibility: "Targets WordPress 6.9+ (PHP 7.2.24+).

references/configuration.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/configuration.md Description: # PHPStan configuration (WordPress) This reference documents a minimal, WordPress-friendly PHPStan setup and baseline workflow.

references/third-party-classes.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/third-party-classes.md Description: # Third-party classes and ignore patterns When PHPStan reports legitimate classes as missing (e.g.

references/wordpress-annotations.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/wordpress-annotations.md Description: # WordPress-specific type annotations These patterns help PHPStan understand WordPress code where runtime behavior and dynamic typing make inference difficult.

scripts/phpstan_inspect.mjsHIGH
78.3%

Malicious tool definition detected

Tool: scripts/phpstan_inspect.mjs Description: import fs from "node:fs"; import path from "node:path"; const TOOL_VERSION = "0.1.0"; /** * Reads and parses JSON from a file path. * * Returns null when parsing fails so the caller can provide user-facing * guidance without crashing. * * @param {string} filePath Absolute path to a JSON file.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
5
Files Flagged
5
Chunks Analyzed
5
Analyzed
Feb 22, 2026, 07:54 AM
Security Audit — runlayer — wp-phpstan