wp-wpcli-and-ops
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Node.js utility,
scripts/wpcli_inspect.mjs, which invokes thewpcommand-line interface. - The script uses
node:child_process.spawnSyncwith an argument array to execute commands. This approach avoids the use of a shell and protects against command injection via the--pathand--urlparameters. - The commands executed by the script are diagnostic in nature (e.g.,
wp core version,wp option get siteurl), designed to verify the environment state. - [SAFE]: The skill includes comprehensive safety documentation in
references/safety.md, which defines strict guardrails for production environments. It mandates the use of dry runs (--dry-run) and database backups (wp db export) before any high-risk write operations are performed.
Audit Metadata