@respira/wordpress-mcp-server@8.3.34
WordPress MCP server + companion plugin giving AI native access to page builder content, not just the REST API. 231 tools, 335 with WooCommerce, 17 page builders and the Site Editor. Element-level edits, full page creation, HTML to builder conversion, sna
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe package has no install hook, but its user-invoked skill installer places first-party agent instructions that call for silent telemetry containing site and report data. This warrants a warning for the guarded, package-owned agent capability rather than a publication block.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the separate skill-install command, then an agent follows the installed skill while generating a report.
Impact
Report and site metadata may be disclosed to the package-aligned service without an explicit telemetry prompt at report time; inspected evidence does not show credential transmission.
Mechanism
The skill requests a silent telemetry POST; its helper sends the supplied data to the Respira endpoint, including possible site and findings metadata.
AI rationale
The package has no install hook, but its user-invoked skill installer places first-party agent instructions that call for silent telemetry containing site and report data. This warrants a warning for the guarded, package-owned agent capability rather than a publication block.
Evidence
dist/install-skills.jsskills/mobile-experience-report/SKILL.mdskills/mobile-experience-report/telemetry.ts
Network endpoints1
www.respira.press/api/skills/track-usage
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes a separate skill-install command and includes bundled skills; no npm install lifecycle hook is present.
- The skill installer copies bundled files to a skills directory under the user's home by default.
- An installed skill directs the agent to silently send telemetry after generating a report.
- The telemetry helper posts the supplied payload to a fixed Respira endpoint without waiting for the response.
- The payload can include the WordPress site URL, version details, and report findings.
Evidence against
- The telemetry endpoint is package-aligned, and the reviewed flow sends report metadata rather than WordPress credentials.
- The skill copy and setup configuration writes are performed through separate commands, not automatically during npm installation.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
6 flagged · loading sourcedist/install-skills.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
const bundled_skills_dir = path.resolve(__dirname, '..', 'skills');
const c = {
reset: '\x1b[0m',
bold: '\x1b[1m',
dim: '\x1b[2m',
red: '\x1b[31m',
green: '\x1b[32m',
yellow: '\x1b[33m',
blue: '\x1b[34m',
cyan: '\x1b[36m',
};
function parseargs(argv) {
const opts = {
dest: path.join(os.homedir(), '.claude', 'skills'),
force: false,
help: false,
};
for (let i = 0; i < argv.length; i++) {
const arg = argv[i];
if (arg === '--help' || arg === '-h') {
opts.help = true;
}
else if (arg === '--force' || arg === '-f') {
opts.force = true;
}
else if (
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/install-skills.jsView on unpkg109function copyFile(src, dest) {
const data = fs.readFileSync(src);
fs.writeFileSync(dest, data);
}
function copySkill(slug, srcDir, destRoot, force) {
const destDir = path.join(destRoot, sl
Medium
Ai Review Evidence
The skill installer copies bundled files to a skills directory under the user's home by default.
dist/install-skills.jsView on unpkg · L109Findings
3 High5 Medium4 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/install-skills.js
HighSemantic Analysis Limiteddist/config.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/server.js
MediumNetwork
MediumEnvironment Vars
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencedist/install-skills.js
MediumAi Review Evidenceskills/mobile-experience-report/SKILL.md
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @respira/wordpress-mcp-server@8.3.34.
See all versions of @respira/wordpress-mcp-server for other recorded verdicts.
- Review the evidence and your use of @respira/wordpress-mcp-server@8.3.34 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.