skills.rest
zenbuapps
zenbuappsOFFICIAL
Explore all skills by this author →
GitHub

security-review-criteria

Audit WordPress plugin code and generate structured security reports with severity levels and remediation suggestions.

1|Updated Mar 6, 2026
Search Tags:#security#owasp#audit#reporting#review#vulnerabilities#wordpress
One-click install
npx skills add https://github.com/zenbuapps/zenbu-powers --skill security-review-criteria-zenbuapps
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review-criteria
Source: https://github.com/zenbuapps/zenbu-powers/tree/main/skills/security-review-criteria
Command: npx skills add https://github.com/zenbuapps/zenbu-powers --skill security-review-criteria-zenbuapps

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

WordPress plugin security is often inconsistent and under-documented. This Skill provides a complete, repeatable checklist and decision logic to assess security posture across OWASP and WordPress-specific risks, enabling consistent reviews and actionable reports.

Core Features & Use Cases

  • Comprehensive 13-dimension security review criteria covering OWASP Top 10, WordPress vulnerabilities (XSS, SQLi, CSRF, capability checks, path traversal, SSRF, REST API), dependency risk, sensitive data exposure, race conditions, and LLM prompt boundary considerations.
  • Standardized output templates and severity scoring for structured security reports suitable for developers, security auditors, and project stakeholders.
  • Use Case: A developer wants to audit a WordPress plugin before release, or a security reviewer needs a repeatable framework to generate before/after patch reports.

Quick Start

Review the WordPress plugin codebase with this skill to apply the criteria and produce a consistent security review report.

Frequently Asked Questions about security-review-criteria

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a WordPress plugin security audit before release?▼

Perform a WordPress plugin security audit by applying a 13-dimension checklist that evaluates PHP code, REST endpoints, and AJAX handlers against OWASP vulnerabilities, producing a structured report with severity scores and actionable remediation suggestions.

What security vulnerabilities should I check for in WordPress plugin PHP code?▼

Check for XSS, SQLi, CSRF, capability checks, path traversal, SSRF, REST API vulnerabilities, sensitive data exposure, race conditions, dependency hygiene, and LLM prompt boundary considerations using standardized security review criteria aligned with OWASP.

Does this security review process work for WordPress REST endpoints and AJAX handlers?▼

Yes, the security review process applies specific criteria to WordPress REST endpoints and AJAX handlers, evaluating capability checks, input validation, and output escaping to identify and document potential vulnerabilities.

How do I generate a standardized security vulnerability report for a plugin?▼

Generate a standardized security vulnerability report by applying the 13-dimension review criteria to the codebase, scoring the severity of each issue, and outputting a repeatable before/after remediation template with actionable suggestions for developers.

Can I use this to document before and after patch reports for security vulnerabilities?▼

Yes, you can document before and after patch reports because the workflow produces a repeatable remediation template that maps identified security vulnerabilities to their suggested fixes for developers and security auditors.

Related Skills

Explore More Software Engineering Skills→
adityaarsharmaadityaarsharma
2

orbit-wp-security

Detect security vulnerabilities in WordPress plugin PHP source code via static analysis.

Community
Advanced
TheSethRoseTheSethRose
63

clawdbot-self-security-audit

Audit Clawdbot's security posture across 13 domains and generate remediation reports.

Community
Advanced
mohitmishra786mohitmishra786
159

conan-vcpkg

Manage C++ library dependencies with Conan and vcpkg for CMake projects.

Community
Intermediate
adityaarsharmaadityaarsharma
2

orbit-ajax-fuzzer

Discover and fuzz test WordPress plugin AJAX endpoints for security vulnerabilities.

Community
Advanced