Is asif2bd/wordpress-publishing-skill-for-claude safe?
Yes. asif2bd/wordpress-publishing-skill-for-claude is safe to install. Oathe's behavioral security audit gave the wordpress-publishing-skill-for-claude skill by asif2bd a trust score of 88/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/asif2bd/wordpress-publishing-skill-for-claude
Is asif2bd/wordpress-publishing-skill-for-claude safe to install?
This WordPress publishing skill provides legitimate functionality for publishing content to WordPress sites via REST API. While credential files were accessed during installation, no actual data exfiltration occurred and the skill's code contains only standard WordPress publishing functionality.
What security issues were found in asif2bd/wordpress-publishing-skill-for-claude?
Category Scores
Findings (3)
MEDIUM Credential File Access During Installation -25 ▶
The installation process accessed multiple sensitive credential files including .env, SSH keys, AWS credentials, .npmrc, Docker config, and GCloud credentials. However, no actual exfiltration occurred and canary integrity was maintained.
LOW Contains Executable Python Code -10 ▶
The skill includes Python scripts for WordPress publishing functionality. Code review shows legitimate WordPress REST API operations with no malicious behavior.
LOW Canary File Access Without Modification -10 ▶
Sensitive canary files were accessed during installation but remained unmodified, suggesting incidental access rather than malicious intent.
Should I install asif2bd/wordpress-publishing-skill-for-claude?
Oathe's verdict for asif2bd/wordpress-publishing-skill-for-claude is SAFE with a trust score of 88/100. Recommendation: Install.