diagnostic-file-permissions

Audit WordPress file permissions via SSH and report security misconfigurations.

27|1|Updated Feb 16, 2026
One-click install
npx skills add https://github.com/dr-robert-li/cowork-wordpress-expert --skill diagnostic-file-permissions
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: diagnostic-file-permissions
Source: https://github.com/dr-robert-li/cowork-wordpress-expert/tree/main/skills/diagnostic-file-permissions
Command: npx skills add https://github.com/dr-robert-li/cowork-wordpress-expert --skill diagnostic-file-permissions

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill identifies and helps you fix insecure file permission configurations on your WordPress site that could expose sensitive data or allow unauthorized access.

Core Features & Use Cases

  • Security Audits: Checks critical files like wp-config.php, .htaccess, and the wp-content/uploads/ directory for overly permissive settings.
  • Risk Assessment: Assigns severity levels (Critical, Warning, Info) to identified permission issues.
  • Actionable Fixes: Provides specific chmod commands to correct misconfigurations.
  • Use Case: Automatically scan your WordPress site's file permissions to ensure your database credentials are not exposed and that the uploads directory cannot be exploited.

Quick Start

Run the diagnostic-file-permissions skill to check the file permissions for your WordPress site.

Frequently Asked Questions about diagnostic-file-permissions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check WordPress file permissions via SSH to find security misconfigurations?

Auditing WordPress file permissions via SSH identifies security misconfigurations in critical files and directories like wp-config.php and .htaccess. It assigns severity levels to risks such as overly permissive settings that expose sensitive data or allow unauthorized access.

What are the correct file permissions for wp-config.php and wp-content/uploads/ in WordPress?

Correct WordPress file permissions restrict wp-config.php to prevent database credential exposure and limit wp-content/uploads/ to block exploit execution. Auditing these critical files identifies overly permissive settings and provides specific chmod commands for remediation.

Do I need SSH access to scan and fix insecure WordPress file permissions?

Yes, SSH access is required to scan and fix insecure WordPress file permissions in this environment. The diagnostic audit operates via SSH to check critical files, identify security misconfigurations, and provide actionable chmod remediation steps.

What's the best way to secure a WordPress debug.log file and prevent unauthorized access?

The best way to secure a WordPress debug.log file is to audit its permissions via SSH to detect overly permissive settings. This identifies associated security risks and provides actionable remediation steps to restrict unauthorized access.

Why does my WordPress site show a security warning for overly permissive .htaccess permissions?

A WordPress security warning for .htaccess permissions occurs when auditing detects overly permissive settings that could allow unauthorized access. The audit assigns a severity level to this misconfiguration and provides specific chmod commands to correct the file access risk.

Can I automatically generate chmod commands to fix WordPress directory permission risks?

Yes, you can automatically generate chmod commands to fix WordPress directory permission risks. The audit assesses files like wp-config.php and wp-content/uploads/, identifies security misconfigurations by severity, and provides actionable remediation steps for SSH-connected environments.