Audit WordPress plugins for OWASP security vulnerabilities and PHP 8.x code quality.
npx skills add https://github.com/scopweb/scp-skills --skill wp-plugin-audit
Please help me install this Agent Skill. Skill: wp-plugin-audit Source: https://github.com/scopweb/scp-skills/tree/main/wp-plugin-audit Command: npx skills add https://github.com/scopweb/scp-skills --skill wp-plugin-audit
La auditoría de plugins de WordPress para seguridad, calidad de código y cumplimiento de buenas prácticas suele ser compleja y propensa a fallos. Este Skill facilita ese proceso al aportar guías claras y un marco estructurado para auditar plugins privados/cliente.
Realiza una auditoría completa de un plugin privado de WordPress aplicando la lista de verificación OWASP, patrones modernos de PHP y prácticas de pruebas para identificar vulnerabilidades y mejorar la calidad.
High-intent search queries and answers about installing and using this skill.
To audit a WordPress plugin, apply a structured checklist covering OWASP security checks, PHP 8.x modern patterns, and PHPUnit/PHPCS testing. This verifies nonces, capabilities, sanitization, escaping, and detects SQL injection or XSS vulnerabilities.
Essential security checks for a custom WordPress plugin include OWASP vulnerability detection, verifying nonces, validating capabilities, ensuring proper data sanitization and escaping, and detecting SQL injection or XSS issues.
To check a WordPress plugin for modern PHP 8.x patterns, audit its use of namespaces, PSR-4 autoloading, and Composer dependencies. This ensures the plugin adheres to contemporary PHP coding standards and architecture.
Yes, you can apply PHPUnit and PHPCS-based testing to private and client WordPress plugins. Integrating these testing frameworks helps identify vulnerabilities and improves code quality during the audit process.
The best way to audit custom post types and taxonomies is to include them in a comprehensive WordPress plugin review, applying OWASP security checks and PHP 8.x modern patterns to ensure they function securely and correctly.
Yes, a WordPress plugin audit covers SQL injection and XSS detection. It specifically includes verifying data sanitization, output escaping, and validating user capabilities to prevent these common vulnerabilities.
petenelsonCreate and manage reusable WordPress block patterns with PHP registration and YAML metadata.
Mte90Enforce PHP best practices, PSR-12 coding style, and PSR-4 autoloading.
bobmatnycRun PHPUnit and WP_Mock tests for WordPress plugins and themes.
coreindustriesExecute automated security scans for dependency vulnerabilities, static code analysis, and secrets detection.
