skills.rest
tonnychiulab
tonnychiulabCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

wp-malware-hunter

Detect and quarantine backdoors, webshells, and malware in WordPress sites.

1|Updated Feb 6, 2026
One-click install
npx skills add https://github.com/tonnychiulab/wp-security-architect --skill wp-malware-hunter
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: wp-malware-hunter
Source: https://github.com/tonnychiulab/wp-security-architect/tree/main/.agent/skills/wp-malware-hunter
Command: npx skills add https://github.com/tonnychiulab/wp-security-architect --skill wp-malware-hunter

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill identifies hidden malicious code within a WordPress site, focusing on backdoors, webshells, trojans and other clandestine threats.

Core Features & Use Cases

  • Layered detection: fast core-file checksums, entropy analysis, signature matching, and heuristic behavior
  • Safe quarantine workflow: temporarily isolates suspect files to avoid site disruption
  • Incident response support: audit trails, progress tracking, and actionable alerts

Quick Start

Clone or install the skill in your WordPress environment per README, enable Malware Hunter in Security Architect dashboard, and run a scan to review quarantined items and alerts.

Frequently Asked Questions about wp-malware-hunter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a WordPress site for hidden malware and backdoors?▼

To scan for WordPress malware, this tool runs a multi-layer detection protocol using core-file checksums, entropy analysis, signature matching, and heuristic analysis to identify webshells and backdoors across plugins and themes.

What is the best way to detect webshells in WordPress plugins and themes?▼

Detecting webshells requires heuristic behavior analysis and signature matching to uncover hidden malicious payloads. This approach scans suspicious files across large sites asynchronously without disrupting normal operations.

Can I safely quarantine infected WordPress files without breaking my site?▼

Yes, safe quarantine workflow temporarily isolates suspect files rather than deleting them, preventing site disruption during incident response while maintaining audit trails and actionable alerts.

Does WordPress malware scanning work for large sites with asynchronous batch processing?▼

Yes, asynchronous batch processing supports scanning large WordPress sites by systematically evaluating core files, plugins, and themes for malicious code without timing out or overwhelming the server.

What types of hidden malicious code can be found during a WordPress security audit?▼

A WordPress security audit can identify backdoors, webshells, trojans, and other clandestine threats by applying layered detection including fast core-file checksums and entropy analysis across the site.

Related Skills

dr-robert-lidr-robert-li
27

diagnostic-core-integrity

Verify WordPress core file integrity against official checksums using WP-CLI.

Community
Intermediate
ElPootElPoot

audit-quarantine

Audit quarantine and purge reversibility for duplicated comprobantes, ORS, and receptor flows.

Community
Intermediate
RexarriorRexarrior

metrics-monitoring

Collects metrics, configures Grafana dashboards, and sets up Prometheus alerts for microservices.

Community
Intermediate
cisco-ai-defensecisco-ai-defense
2.4k

eicar-test

Validate malware detection pipelines using a standard EICAR test file.

Official
Basic