massbloger

• Outcome: Review
• Latest audit: Sep 11, 2026 · 2:45 PM UTC
• Version: 1.0.0

Overview

The skill is transparent about managing WordPress through Massblogger, but it gives a hosted service broad ongoing power over site content and administration.

Review this before installing if you manage production WordPress sites. Use a dedicated least-privilege WordPress account where possible, avoid Administrator credentials unless needed, enable dry runs and publish guard for content workflows, and be ready to revoke both the Massblogger MCP token and WordPress Application Password if access is no longer needed or may be exposed.

A.I.G

Vulnerability Patterns

• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T05 · Unauthorized Access and Privilege Escalation

Error

• Location: SKILL.md:136

Finding

Overprivileged WordPress Credentials and Account-Wide MCP Access

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 91% confidence

Finding

The skill grants an external hosted MCP server broad persistent read/write authority over WordPress assets, including high-impact resources such as users, plugins, themes, settings, and content across one or more sites. Because access is mediated by long-lived credentials stored server-side and intended for repeated remote use, compromise or misuse of the Massblogger account, MCP token, or connected service could lead to sustained unauthorized administrative actions.

Content

Scanner excerpt · SKILL.md (reported line 9)May include surrounding context.

md

## Overview

- **What it does:** Connects OpenClaw to the Massblogger MCP server, giving the agent full read/write access to WordPress (posts, pages, categories, tags, media, menus, users, settings, comments, plugins, themes, revisions, scheduling) plus Massblogger's native content generation, pSEO, automation, and media pipelines.
- **When to use it:** When you want an AI agent to manage one or more WordPress sites — writing, editing, publishing, restructuring, bulk operations, cross-site changes — without you copying HTML or switching tabs.
- **Requirements:** A Massblogger account at massblogger.com, at least one WordPress site connected in Massblogger (with Application Password stored), and an MCP token generated from Massblogger settings.

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 60% confidence

Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 105)May include surrounding context.

text

```text
Write a 1500-word article about the best lightweight camping stoves for myblog.com, publish it as a draft, generate a featured image, and set the Yoast meta description

text

Static analysis

No suspicious patterns detected.