WordPress API Pro

• Analyzed: May 14, 2026, 5:09 AM
• Findings: 1
• Version: 3.4.0
• Hash: d83c2f88ef1f64e34d03a47260b4f3a0f749894ad956ed30887e6f9d62c04360
• Source: palm
• External report: View on VirusTotal

Findings (1)

The wordpress-api-pro skill is a professionally developed tool for managing WordPress sites with a strong emphasis on security and safety boundaries. It includes a dedicated security module (scripts/security.py) that implements robust protections against SSRF (blocking private/local IP ranges for remote media) and path traversal (restricting local file reads to approved roots). The SKILL.md instructions explicitly guide the AI agent to seek user approval for live writes and utilize dry-run modes, while the code follows best practices by handling credentials via environment variables rather than command-line arguments.