wp-security-review

wp-security-review is an Application security skill for AI agents, published by jorgerosal in the wordpress-skills repository on GitHub. Skillspace rates wp-security-review F (45/100) and the safety scan rated it risky; the rating is based on static analysis only.

WordPress security code review and vulnerability detection. Use when reviewing WordPress PHP code for security issues, auditing themes/plugins for vulnerabilities, checking code before launch, analyzing AJAX/REST handlers for exploits, detecting XSS, SQL injection, CSRF, or authorization bypass, or when user mentions "security review", "vulnerability", "XSS", "SQL injection", "CSRF", "nonce", "sanitization", "escaping", "capability check", "privilege escalation", "file upload security", "insecure code", "auth bypass", or "security audit". Detects vulnerabilities in input handling, output escaping, authorization, nonces, database queries, file uploads, and dangerous functions.

Grade
F
Quality
45 / 100
Safety
Risky
GitHub stars
41

Unproven: rated by static analysis only, not yet compared head-to-head.

This rating describes the version of the repository we crawled; it may have changed since.

View source on GitHubjorgerosal/wordpress-skills

Our review

Architecture
92 / 100
Maturity
Structured: ships references or scripts
Security scan
High-risk patterns
License
MIT
Adoption
Adopted by 0 other repositories, in 0 collections

What the scanner flagged

  • dynamic code execution (eval/exec)

Not checked yet

  • Category is a classifier prediction; no model has read this skill yet
  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Better-rated skills in Application security

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.