skills.rest
maitret
maitretCOMMUNITY
Explore all skills by this author →
Website𝕏@maitretGitHub

wp-malware-remediation

Remediate PHP malware on WordPress sites across CWP, aaPanel, and cPanel environments.

2|Updated Mar 22, 2026
Search Tags:#automation#security#wordpress#malware-remediation#remediation-pipeline#core-restoration
One-click install
npx skills add https://github.com/maitret/WordPress_MalwareScanner --skill wp-malware-remediation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: wp-malware-remediation
Source: https://github.com/maitret/WordPress_MalwareScanner/tree/main
Command: npx skills add https://github.com/maitret/WordPress_MalwareScanner --skill wp-malware-remediation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires watchdog, yara, yara_x.

What problem does it solve?

Analizar, detectar y limpiar malware PHP en sitios WordPress alojados en servidores Linux (CWP/cPanel). Cubre el ciclo completo: triage, backup, escaneo heurístico, clasificación de hallazgos, limpieza quirúrgica de código inyectado, eliminación de archivos 100% maliciosos, restauración de WordPress core, validación post-limpieza y hardening. WHEN: malware en WordPress, limpiar sitio hackeado, código ofuscado PHP, webshell, backdoor, hacklink, archivos sospechosos en uploads, eval base64_decode, archivo PHP inyectado, limpiar servidor comprometido, cuarentena malware, restaurar WordPress core.

Core Features & Use Cases

  • Triaging y backup para sitios WordPress comprometidos y recuperación de estado conocido.
  • Escaneo heurístico con clasificación de hallazgos (MALWARE, LIKELY_MALWARE, SUSPICIOUS) y generación de reportes.
  • Limpieza quirúrgica de código inyectado, eliminación de archivos 100% maliciosos y restauración de WordPress core.
  • Validación post-limpieza y aplicación de hardening para endurecer la seguridad.
  • Orquestación de flujo de trabajo compatible con entornos CWP, aaPanel y cPanel.

Quick Start

Run the remediation workflow against a compromised WordPress site to detect, clean, and harden the installation.

Frequently Asked Questions about wp-malware-remediation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I clean PHP malware from a hacked WordPress site on cPanel?▼

Cleaning PHP malware from a hacked WordPress site requires a complete remediation workflow: triage, backup, heuristic scanning, surgical cleaning of injected code, and WordPress core restoration. This process works across cPanel, CWP, and aaPanel environments to fully remove webshells and backdoors.

What is the best way to remove webshells and backdoors in WordPress uploads?▼

The best way to remove webshells and backdoors is using a heuristic scanner that classifies findings as MALWARE, LIKELY_MALWARE, or SUSPICIOUS. This enables surgical cleaning of injected code and the complete removal of fully malicious files from WordPress installations.

Does WordPress malware remediation work with CWP and aaPanel servers?▼

Yes, WordPress malware remediation works with CWP and aaPanel servers. The remediation workflow orchestrates the complete lifecycle from malware detection to security hardening across CWP, aaPanel, and cPanel Linux environments.

How do I restore WordPress core files after a malware infection?▼

To restore WordPress core files after a malware infection, run a post-cleaning validation and core restoration process. This replaces compromised core files with known clean versions and applies hardening measures to end the remediation lifecycle and prevent reinfection.

Can YARA rules detect obfuscated PHP code and eval base64_decode injections?▼

Yes, YARA rules can detect obfuscated PHP code and eval base64_decode injections. The remediation pipeline leverages YARA and heuristic scanning to identify suspicious patterns, classify the findings, and clean the malicious code effectively.

Why do I need a database backup before removing malware from a compromised server?▼

You need a database backup before removing malware from a compromised server to ensure recovery to a known state. The remediation workflow performs triaging and backup as its initial step, securing data before attempting surgical cleaning or file removal.

Related Skills

Explore More Software Engineering Skills→
sliamh11sliamh11
50

add-llama-cpp

Install and verify a local llama.cpp server for Deus local-generation experiments.

Community
Advanced
alslimanyalslimany

spatie-security

Apply Spatie security guidelines to application, database, and server configurations.

Community
Intermediate
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

yara-authoring

Write and test YARA rules to detect malware samples and threats.

Official
Intermediate
tonnychiulabtonnychiulab
1

wp-malware-hunter

Detect and quarantine backdoors, webshells, and malware in WordPress sites.

Community
Advanced