The Agent Skills Directory

[SAFE]: No malicious patterns or security vulnerabilities were identified in the skill body, metadata, or scripts.
[COMMAND_EXECUTION]: The skill guides the agent to identify and suggest execution of project-specific static analysis commands (e.g., composer run phpstan). The discovery process implemented in scripts/phpstan_inspect.mjs is restricted to read-only operations on standard configuration files like composer.json and phpstan.neon.
[EXTERNAL_DOWNLOADS]: The documentation suggests the use of community-standard PHP stub packages for WordPress. These references are part of the legitimate primary purpose of the skill and target well-known repositories within the PHP/WordPress development ecosystem.

wp-phpstan