The Agent Skills Directory

[SAFE]: The inspection script perf_inspect.mjs safely interacts with the system using spawnSync with an arguments array, which effectively mitigates common command injection vulnerabilities by not invoking a shell.
[SAFE]: The skill leverages official WordPress and WP-CLI diagnostic tools and provides clear guidance on safety, such as obtaining approval before running performance-heavy operations (e.g., wp cache flush or SAVEQUERIES) in production environments.
[SAFE]: All external URLs and package recommendations point to official WordPress documentation (make.wordpress.org) and reputable community repositories (wp-cli.dev) associated with the WordPress ecosystem.
[SAFE]: The instructions for targeted code profiling using wp profile eval are transparent and appropriate for the skill's primary purpose of backend performance measurement.
[SAFE]: The script uses standard file system checks to detect the presence of performance-related plugins and drop-ins without accessing sensitive file content or environment secrets.

wp-performance