wp-malware-hunter

Detect and quarantine backdoors, webshells, and malware in WordPress sites.

1|Updated Feb 6, 2026

Ready to run

npx skills add https://github.com/tonnychiulab/wp-security-architect --skill wp-malware-hunter

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: wp-malware-hunter
Source: https://github.com/tonnychiulab/wp-security-architect/tree/main/.agent/skills/wp-malware-hunter
Command: npx skills add https://github.com/tonnychiulab/wp-security-architect --skill wp-malware-hunter

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill identifies hidden malicious code within a WordPress site, focusing on backdoors, webshells, trojans and other clandestine threats.

Core Features & Use Cases

Layered detection: fast core-file checksums, entropy analysis, signature matching, and heuristic behavior
Safe quarantine workflow: temporarily isolates suspect files to avoid site disruption
Incident response support: audit trails, progress tracking, and actionable alerts

Quick Start

Clone or install the skill in your WordPress environment per README, enable Malware Hunter in Security Architect dashboard, and run a scan to review quarantined items and alerts.

Frequently Asked Questions about wp-malware-hunter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan a WordPress site for hidden malware and backdoors?▼

To scan for WordPress malware, this tool runs a multi-layer detection protocol using core-file checksums, entropy analysis, signature matching, and heuristic analysis to identify webshells and backdoors across plugins and themes.

What is the best way to detect webshells in WordPress plugins and themes?▼

Detecting webshells requires heuristic behavior analysis and signature matching to uncover hidden malicious payloads. This approach scans suspicious files across large sites asynchronously without disrupting normal operations.

Can I safely quarantine infected WordPress files without breaking my site?▼

Yes, safe quarantine workflow temporarily isolates suspect files rather than deleting them, preventing site disruption during incident response while maintaining audit trails and actionable alerts.

Does WordPress malware scanning work for large sites with asynchronous batch processing?▼

Yes, asynchronous batch processing supports scanning large WordPress sites by systematically evaluating core files, plugins, and themes for malicious code without timing out or overwhelming the server.

What types of hidden malicious code can be found during a WordPress security audit?▼

A WordPress security audit can identify backdoors, webshells, trojans, and other clandestine threats by applying layered detection including fast core-file checksums and entropy analysis across the site.