wp-performance

Fail

Audited by Runlayer on Mar 13, 2026

Risk Level: HIGH
Scan Summary
Max Score
93%
Files
12
Flagged
9
Chunks
12
Flagged Files (9)
wp-performance/references/server-timing.mdHIGH
93.1%

Risky tool definition detected

- Request a URL and inspect the `Server-Timing` header: - `curl -sS -D - https://example.test/ -o /dev/null | rg -i \"^server-timing:\"` Guardrails: - Don’t enable experimental modules in production without approval.

wp-performance/references/http-api.mdMEDIUM
87.3%

Risky tool definition detected

wp-performance/references/measurement.mdMEDIUM
86.5%

Risky tool definition detected

wp-performance/references/object-cache.mdMEDIUM
76.9%

Risky tool definition detected

wp-performance/references/cron.mdLOW
71.6%

Prompt Injection

Context Poisoning

wp-performance/references/autoload-options.mdLOW
70.9%

Risky tool definition detected

Docs: - `wp option list`: https://wpcli.dev/docs/option/list - `wp doctor` includes an `autoload-options-size` check: - https://make.wordpress.org/cli/handbook/doctor-default-checks/ ## Fix patterns - Stop autoloading large blobs: - store large data in non-autoload options (autoload=off) - move large computed data to transients/object cache - Remove stale options left behind by removed plugins/themes (careful: confirm usage before deleting).

wp-performance/SKILL.mdLOW
70.7%

Risky tool definition detected

wp-performance/references/database.mdLOW
66.3%

Tool passed security scan

wp-performance/references/query-monitor-headless.mdLOW
57.0%

Tool passed security scan

Passed Files (3)Click to expand
wp-performance/references/wp-cli-doctor.mdOK
47.9%

Tool passed security scan

wp-performance/references/wp-cli-profile.mdOK
35.3%

Tool passed security scan

wp-performance/scripts/perf_inspect.mjsOK
18.6%

Tool passed security scan

Audit Metadata
Max File Score
93%
Classification
UNKNOWN_SERVER
Files Scanned
12
Files Flagged
9
Chunks Analyzed
12
Analyzed
Mar 13, 2026, 05:57 PM
Security Audit — runlayer — wp-performance