wordpress-penetration-testing

SUSPICIOUS/HIGH-RISK skill. The content is internally consistent with its stated purpose, and referenced tools are legitimate, but that purpose is to give an AI agent offensive security capabilities: scanning, credential attacks, exploitation, and shell access against WordPress targets. No clear publisher-side credential harvesting or hidden exfiltration is present, but the autonomous attack guidance, reverse-shell payloads, and TLS-check disabling make the skill dangerous and inappropriate for general agent use.