registry / @respira/wordpress-mcp-server / 8.3.21

@respira/wordpress-mcp-server@8.3.21

WordPress MCP server + companion plugin giving AI native access to page builder content, not just the REST API. 220 tools, 325 with WooCommerce, 17 page builders and the Site Editor. Element-level edits, full page creation, HTML to builder conversion, sna

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Static inspection found no lifecycle trigger, self-dependency chain, payload execution, credential harvesting, or unconsented control-surface mutation. The flagged AI-agent writes are explicit setup actions and are limited to the package's own MCP or skill entries.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Running the setup or skill-install commands, or operating the MCP server with configured Respira or WordPress credentials.

Impact

A user who explicitly invokes setup can add the package's MCP entry or bundled skills; normal runtime can contact configured services.

Mechanism

Explicit MCP setup, WordPress API access, update checks, and optional authenticated telemetry.

AI rationale

Evidence

~/.respira/config.json~/.claude/skills~/.codex/config.toml~/.claude.json.cursor/mcp.json

Network endpoints2

registry.npmjs.orgwww.respira.press/mcp-spend/track

Decision evidence

public snapshot

AI called this Clean at 89.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest has no preinstall, install, postinstall, or prepare hook, and no self-dependency.
Skill installation and AI-client configuration changes require an explicit command or --install-config flag with a client and token.
The configuration module deliberately avoids reading other vendors' client configuration files.
The server's process execution only enumerates running processes to detect duplicate Respira servers.

Evidence against

The explicit setup command can download and merge a Respira MCP entry into supported AI-client configuration files.
Runtime telemetry sends metadata to a Respira endpoint when an authentication token is configured.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsPossibleObfuscationUrlStrings

Manifest

Source & flagged code

6 flagged

dist/install-skills.jsView file

Lines 132-172javascript

132 }

133 else {

134 copyFile(srcPath, dstPath);

135 }

136 }

137 return exists ? 'updated' : 'installed';

138}

139function copyDir(src, dest) {

140 fs.mkdirSync(dest, { recursive: true });

141 for (const entry of fs.readdirSync(src, { withFileTypes: true })) {

142 const srcPath = path.join(src, entry.name);

143 const dstPath = path.join(dest, entry.name);

144 if (entry.isDirectory()) {

145 copyDir(srcPath, dstPath);

146 }

147 else {

148 copyFile(srcPath, dstPath);

149 }

150 }

151}

152function main() {

153 const argv = process.argv.slice(2);

154 const opts = parseArgs(argv);

155 if (opts.help) {

156 printHelp();

157 process.exit(0);

158 }

159 if (!fs.existsSync(BUNDLED_SKILLS_DIR)) {

160 console.error(`${c.red}error:${c.reset} bundled skills directory not found at ${BUNDLED_SKILLS_DIR}`);

Low

Ai Review Evidence

Skill installation and AI-client configuration changes require an explicit command or --install-config flag with a client and token.

dist/install-skills.jsView on unpkg · L152

161 console.error(`${c.dim}This means the npm package wasn't built with skills. Reinstall:${c.reset}`);

162 console.error(` npm install -g @respira/wordpress-mcp-server@latest`);

163 process.exit(1);

164 }

165 const skills = listBundledSkills(BUNDLED_SKILLS_DIR);

166 if (skills.length === 0) {

167 console.error(`${c.red}error:${c.reset} no skills found in ${BUNDLED_SKILLS_DIR}`);

168 process.exit(1);

169 }

170 console.log(`${c.bold}Installing ${skills.length} Respira skill${skills.length === 1 ? '' : 's'} to ${opts.dest}${c.reset}

171 let installed = 0;

172 let updated = 0;

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. const bundled_skills_dir = path.resolve(__dirname, '..', 'skills'); const c = { reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m', red: '\x1b[31m', green: '\x1b[32m', yellow: '\x1b[33m', blue: '\x1b[34m', cyan: '\x1b[36m', }; function parseargs(argv) { const opts = { dest: path.join(os.homedir(), '.claude', 'skills'), force: false, help: false, }; for (let i = 0; i < argv.length; i++) { const arg = argv[i]; if (arg === '--help' || arg === '-h') { opts.help = true; } else if (arg === '--force' || arg === '-f') { opts.force = true; } else if (

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/install-skills.jsView on unpkg

dist/config.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/config.js#virtual:normalized:round1View on unpkg

dist/server.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @respira/wordpress-mcp-server@8.3.23 matchedIdentity = npm:[redacted]:8.3.23 similarity = 0.818 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server.jsView on unpkg

package.jsonView file

Lines 7-47json

7 "bin": {

8 "wordpress-mcp-server": "./dist/index.js",

9 "respira-wordpress-mcp": "./dist/index.js",

10 "respira-setup": "./dist/setup.js",

11 "respira-install-skills": "./dist/install-skills.js"

dist/setup.jsView file

Lines 975-1015javascript

975}

976export async function handleSetupCli() {

977 const args = process.argv.slice(2);

978 // Pre-flight: ensure Node version is supported before any other branch

979

Source & flagged code

6 flagged · loading source

dist/install-skills.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/install-skills.jsView on unpkg

152function main() { const argv = process.argv.slice(2); const opts = parseArgs(argv); if (opts.help) { printHelp(); process.exit(0); } if (!fs.existsSync(BUNDLED_SKILLS_DIR)) { console.error(`${c.red}error:${c.reset} bundled skills directory not found at ${BUNDLED_SKILLS_DIR}`);

Low

Ai Review Evidence

Skill installation and AI-client configuration changes require an explicit command or --install-config flag with a client and token.

dist/install-skills.js

Findings

3 High2 Medium7 Low

HighTrigger Reachable External Ai Agent Control Surface Mutationdist/install-skills.js

HighSemantic Analysis Limiteddist/config.js#virtual:normalized:round1

HighPrevious Version Dangerous Deltadist/server.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/install-skills.js

LowAi Review Evidencedist/setup.js

Affected versions and remediation

This report applies to @respira/wordpress-mcp-server@8.3.21.

See all versions of @respira/wordpress-mcp-server for other recorded verdicts.

Review the evidence and your use of @respira/wordpress-mcp-server@8.3.21 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-11 23:47:03.396Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.