The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/perf_inspect.mjs uses node:child_process.spawnSync to execute the wp command-line utility. It constructs command arguments using user-provided paths and URLs.
[EXTERNAL_DOWNLOADS]: The skill's documentation and diagnostic script recommend the installation of additional WP-CLI packages, such as wp-cli/doctor-command and wp-cli/profile-command, to enable advanced profiling features.
[PRIVILEGE_ESCALATION]: The perf_inspect.mjs script and skill instructions support the --allow-root flag, which allows WP-CLI to bypass its default safety check and run with root privileges if the environment requires it.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process diagnostic output from external CLI tools like wp profile and wp doctor. While this creates a potential surface for indirect prompt injection from compromised system data, the tool's primary function is observational and diagnostic.
Ingestion points: Output from wp CLI commands captured by perf_inspect.mjs and processed by the agent.
Boundary markers: None explicitly defined for tool output parsing.
Capability inventory: The skill facilitates file system inspection and CLI command execution via the wp binary.
Sanitization: The script performs basic regex validation on numeric output (e.g., autoload bytes) but otherwise passes tool output directly back to the agent.

wp-performance