registry / @respira/wordpress-mcp-server / 8.3.32

@respira/wordpress-mcp-server@8.3.32

WordPress MCP server + companion plugin giving AI native access to page builder content, not just the REST API. 231 tools, 335 with WooCommerce, 17 page builders and the Site Editor. Element-level edits, full page creation, HTML to builder conversion, sna

AI Security Review

scanned 12d ago · by lpm-firewall-ai

The manifest has no install lifecycle hooks, and the inspected agent-related writes are behind explicit user commands. Source inspection found no concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

The user runs the skill installer or selects the setup command and supplies an install token.

Impact

These commands can change the user's skill or MCP configuration; the inspected code does not establish an unconsented attack surface.

Mechanism

The installer copies bundled skill files, while setup fetches the selected client configuration and merges the package server entry.

AI rationale

The manifest has no install lifecycle hooks, and the inspected agent-related writes are behind explicit user commands. Source inspection found no concrete malicious behavior.

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes separate server, setup, and skill-installer commands; it declares no lifecycle hooks.
dist/install-skills.js copies bundled skill files only when the installer command is run; existing skills are skipped unless forced.
dist/setup.js requires an install token for the explicit install-config operation before it fetches and writes client configuration.
dist/setup.js restricts client configuration changes to the selected server entry; for an existing Hermes config, it writes nothing.
dist/config.js reads WordPress credentials from command-line options or environment variables for the configured WordPress service.
dist/server.js uses process listing to identify sibling Respira servers; no attack behavior was identified in the inspected code.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

Source & flagged code

6 flagged

dist/install-skills.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. const bundled_skills_dir = path.resolve(__dirname, '..', 'skills'); const c = { reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m', red: '\x1b[31m', green: '\x1b[32m', yellow: '\x1b[33m', blue: '\x1b[34m', cyan: '\x1b[36m', }; function parseargs(argv) { const opts = { dest: path.join(os.homedir(), '.claude', 'skills'), force: false, help: false, }; for (let i = 0; i < argv.length; i++) { const arg = argv[i]; if (arg === '--help' || arg === '-h') { opts.help = true; } else if (arg === '--force' || arg === '-f') { opts.force = true; } else if (

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/install-skills.jsView on unpkg

39'.claude', 'skills'), force: false, help: false, }; for (let i = 0; i < argv.length; i++) { const arg = argv[i]; if (arg === '--help' || arg

Low

Ai Review Evidence

dist/install-skills.js copies bundled skill files only when the installer command is run; existing skills are skipped unless forced.

dist/install-skills.jsView on unpkg · L39

dist/config.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/config.js#virtual:normalized:round1View on unpkg

dist/server.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @respira/wordpress-mcp-server@8.3.24 matchedIdentity = npm:[redacted]:8.3.24 similarity = 0.917 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server.jsView on unpkg

package.jsonView file

6"main": "dist/index.js", "bin": { "wordpress-mcp-server": "./dist/index.js", "respira-wordpress-mcp": "./dist/index.js", "respira-setup": "./dist/setup.js", "respira-install-skills": "./dist/install-skills.js" }, "files": [ "dist/**

Low

Suspicious Lifecycle Evidence

package.json exposes separate server, setup, and skill-installer commands; it declares no lifecycle hooks.

package.jsonView on unpkg · L6

dist/setup.jsView file

Lines 680-720javascript

680 renderDoctorBox(checks);

681 console.log('');

682 }

683 // Exit code: 1 if any critical check (fail) exists

684 const hasCritical = checks.some(ch

Source & flagged code

6 flagged · loading source

dist/install-skills.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/install-skills.jsView on unpkg

39'.claude', 'skills'), force: false, help: false, }; for (let i = 0; i < argv.length; i++) { const arg = argv[i]; if (arg === '--help' || arg

Low

Ai Review Evidence

dist/install-skills.js copies bundled skill files only when the installer command is run; existing skills are skipped unless forced.

dist/install-skills.jsView on unpkg · L39

Findings

3 High2 Medium7 Low

HighTrigger Reachable External Ai Agent Control Surface Mutationdist/install-skills.js

HighSemantic Analysis Limiteddist/config.js#virtual:normalized:round1

HighPrevious Version Dangerous Deltadist/server.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/install-skills.js

LowAi Review Evidencedist/setup.js

Affected versions and remediation

This report applies to @respira/wordpress-mcp-server@8.3.32.

See all versions of @respira/wordpress-mcp-server for other recorded verdicts.

Review the evidence and your use of @respira/wordpress-mcp-server@8.3.32 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 04:16:08.098Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.