wordpress-plugin-core

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The WordPress plugin development skill is largely benign and aligned with its stated purpose: it teaches secure plugin architecture, WordPress API usage, and best practices without demanding unnecessary privileges, installer binaries, or exfiltration mechanisms. Security risks are low to moderate (principally due to the potential for credential mishandling in real-world deployments if developers misuse update mechanisms or store secrets insecurely). Overall, it is consistent with a developer-oriented training skill and does not exhibit malicious or highly suspicious data flows.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 03:52 AM
Package URL
pkg:socket/skills-sh/evolv3ai%2Fclaude-skills-archive%2Fwordpress-plugin-core%2F@d770365a2dd7f204de158d430728c53f0eb9a9de