wp-debug

Warn

Audited by Socket on Feb 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill concept is aligned with enabling and restoring WP_DEBUG states within a theme/plugin directory, including a backup and live log tail. Significant security concerns exist around broad path searches, potential credential exposure in backups, and fragile wp-config.php modification logic. In controlled dev environments, it can be practical, but it should be tightened with restricted path resolution, encrypted/secured backups, explicit user confirmations, and robust parsing/editing of wp-config.php to reduce misconfigurations.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 28, 2026, 09:09 PM
Package URL
pkg:socket/skills-sh/aslamdoctor%2Fwp-debug-skill%2Fwp-debug%2F@6ff68947ac1b625da85a42bcac65ced59263de8d