Audit WordPress themes for security issues and best practice deviations.
npx skills add https://github.com/scopweb/scp-skills --skill wp-theme-auditor
Please help me install this Agent Skill. Skill: wp-theme-auditor Source: https://github.com/scopweb/scp-skills/tree/main/wp-theme-auditor Command: npx skills add https://github.com/scopweb/scp-skills --skill wp-theme-auditor
WordPress themes often ship with security and quality gaps. This Skill identifies and reports security issues and deviations from best practices in existing WordPress themes, helping you catch problems before they impact users.
Provide the WordPress theme code or path to run the full audit workflow and obtain a detailed report.
High-intent search queries and answers about installing and using this skill.
To audit a WordPress theme for security vulnerabilities, provide the theme code or path to trigger a full audit workflow. The process analyzes core files like functions.php, templates, and theme.json to identify security issues and deviations from best practices.
Security issues commonly found in WordPress theme functions.php files include cross-site scripting (XSS), cross-site request forgery (CSRF), and inadequate data sanitization. The audit identifies these vulnerabilities and outputs a structured report with actionable remediation steps.
Yes, you can audit a Block or FSE theme using this method. The audit supports both Classic and Block/FSE themes, specifically analyzing theme.json, templates, and partials to ensure they adhere to current WordPress security and quality standards.
Yes, the audit covers Divi child themes and their overrides. It examines child theme overrides, partials, and style.css files to detect inherited vulnerabilities and ensure that customizations maintain security best practices across the parent-child theme hierarchy.
Known CVEs are checked during a WordPress theme audit by cross-referencing the theme's code and dependencies against a database of known vulnerabilities. This process identifies active risks and generates a structured report with prioritized remediation steps.
JeffallanDevelop WordPress themes, plugins, and Gutenberg blocks with security best practices.
lee-toAudit projects against OWASP Top 10 and generate prioritized findings with remediation steps.
keshavraj936Lint and statically analyze Node.js and Python code modifications.
fatihkanDetect PHP security anti-patterns and vulnerabilities in Laravel, WordPress, and general projects.
