skills/automattic/agent-skills/wp-playground/Runlayer

wp-playground

Warn

Audited by Runlayer on Feb 23, 2026

Risk Level: MEDIUM

Scan Summary

Max Score

78%

Files

Flagged

Chunks

Flagged Files (4)

SKILL.mdHIGH

78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: wp-playground description: "Use for WordPress Playground workflows: fast disposable WP instances in the browser or locally via @wp-playground/cli (server, run-blueprint, build-snapshot), auto-mounting plugins/themes, switching WP/PHP versions, blueprints, and debugging (Xdebug)." compatibility: "Targets WordPress 6.9+ (PHP 7.2.24+). Playground CLI requires Node.js 20.18+; runs WP in WebAssembly with SQLite." --- # WordPress Playground ## When to use - Spin u

references/blueprints.mdHIGH

78.3%

Malicious tool definition detected

### Minimal example ```json { "$schema": "https://playground.wordpress.net/blueprint-schema.json", "steps": [ { "step": "installTheme", "themeZipUrl": "https://downloads.wordpress.org/theme/twentytwentythree.zip" }, { "step": "installPlugin", "pluginZipUrl": "https://downloads.wordpress.org/plugin/classic-editor.zip" } ] } ``` ### Common steps (non-exhaustive) - `setSiteUrl`, `setHomeUrl`

references/cli-commands.mdHIGH

78.3%

Malicious tool definition detected

> Latest version: 3.0.20 (November 2025) ### What's new in 2025 - **PHP 8.3 is now the default** (since July 2025).

references/debugging.mdHIGH

78.3%

Malicious tool definition detected

Tool: references/debugging.md Description: ## Debugging WordPress Playground - Start CLI with Xdebug: `server --auto-mount --xdebug` (or `--enable-xdebug` depending on release).

Audit Metadata

Max File Score

78%

Classification

UNKNOWN_SERVER

Files Scanned

Files Flagged

Chunks Analyzed

Analyzed

Feb 23, 2026, 03:56 PM