Security audit
WordPress.com
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent WordPress.com connector that uses OAuth to reach the WordPress.com MCP service, with no local code or hidden execution found.
Before installing, confirm you are comfortable connecting a WordPress.com account and allowing an agent to use tools that may read or change posts, pages, drafts, comments, and stats. Review OAuth prompts and approve content-changing actions carefully.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.