wp-performance
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Node.js helper script (
scripts/perf_inspect.mjs) to executewp-clicommands viaspawnSync. This is used to programmatically detect the WordPress environment state, such as core version and the presence of diagnostic tools. - [COMMAND_EXECUTION]: The documentation instructs the agent to use powerful profiling commands like
wp profile stageandwp profile eval. While these allow for PHP execution on the server, they are standard and necessary tools for the skill's stated purpose of performance optimization. - [EXTERNAL_DOWNLOADS]: The skill references and suggests the installation of official WP-CLI packages (e.g.,
wp-cli/doctor-commandandwp-cli/profile-command). These packages originate from the official WP-CLI GitHub organization and are well-known, trusted extensions within the WordPress ecosystem.
Audit Metadata