wp-cli-local
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes bash scripts (
wpandsetup-direnv) that execute local commands, includingpython3,find, and thewp-clibinary. This execution is scoped to managing local WordPress installations. - [DATA_EXPOSURE]: The scripts read configuration and status data from
~/Library/Application Support/Local/. This access is necessary to detect site paths, PHP versions, and database socket locations required for WP-CLI to function with Local's infrastructure. - [DYNAMIC_EXECUTION]: The bash scripts utilize inline Python snippets to parse JSON data. While shell variables are interpolated into these snippets, the data source is a local application configuration file, posing minimal risk in the intended execution context.
Audit Metadata