wp-wpcli-and-ops

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
9
Flagged
9
Chunks
9
Flagged Files (9)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: wp-wpcli-and-ops description: "Use when working with WP-CLI (wp) for WordPress operations: safe search-replace, db export/import, plugin/theme/user/content management, cron, cache flushing, multisite, and scripting/automation with wp-cli.yml." compatibility: "Targets WordPress 6.9+ (PHP 7.2.24+).

references/automation.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/automation.md Description: # Automation with WP-CLI Use this file when turning an ops sequence into a repeatable script or CI job.

references/cron-and-cache.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/cron-and-cache.md Description: # Cron, caches, and rewrites Use this file when debugging background jobs or “changes not visible”.

references/debugging.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/debugging.md Description: # Debugging WP-CLI ## WP not found / wrong WP root - Run `wp --info`.

references/multisite.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/multisite.md Description: # Multisite targeting Use this file any time you might be operating on multisite.

references/packages-and-updates.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/packages-and-updates.md Description: # Plugin/theme operations Use this file for installs, activation, updates, and listing state.

references/safety.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/safety.md Description: # Safety rules (WP-CLI) Use this file before running any write operations.

references/search-replace.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/search-replace.md Description: # Safe `wp search-replace` Use this file when migrating domains, switching http→https, or changing paths.

scripts/wpcli_inspect.mjsHIGH
78.3%

Malicious tool definition detected

Tool: scripts/wpcli_inspect.mjs Description: import { spawnSync } from "node:child_process"; const TOOL_VERSION = "0.1.0"; function parseArgs(argv) { const args = { path: null, url: null, allowRoot: false }; for (const a of argv) { if (a === "--allow-root") args.allowRoot = true; if (a.startsWith("--path=")) args.path = a.slice("--path=".length); if (a.startsWith("--url=")) args.url = a.slice("--url=".length); } return args; } function runWp(cmdArgs, { pathArg, urlArg, allowRoot }) { const args

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
9
Files Flagged
9
Chunks Analyzed
9
Analyzed
Feb 22, 2026, 07:51 AM
Security Audit — runlayer — wp-wpcli-and-ops