registry / @respira/wordpress-mcp-server / 8.3.39
@respira/wordpress-mcp-server@8.3.39
WordPress MCP server + companion plugin giving AI native access to page builder content, not just the REST API. 235 tools, 339 with WooCommerce, 17 page builders and the Site Editor. Element-level edits, full page creation, HTML to builder conversion, sna
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the agent-related writes occur through explicit setup commands. The inspected source supports package-aligned setup and process discovery, with no concrete attack behavior identified.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the setup or install-skills command.
Impact
No confirmed attack surface was established; the inspected behaviors are package-aligned setup operations.
Mechanism
The skills command copies bundled package skills, while setup fetches a token-specific client configuration and installs it at the selected client's configuration path.
AI rationale
The manifest has no install lifecycle hook, and the agent-related writes occur through explicit setup commands. The inspected source supports package-aligned setup and process discovery, with no concrete attack behavior identified.
Evidence
dist/config.jsdist/install-skills.jsdist/setup.jsdist/server.jspackage.json
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes server and setup commands but defines no install lifecycle hook.
- dist/install-skills.js defaults to the user's Claude skills directory and skips existing skills unless forced; it runs as a command.
- dist/setup.js selects configuration paths for supported clients; configuration installation fetches a token-specific payload after setup is invoked.
- dist/config.js describes how workspace and environment configuration sources take precedence.
- dist/server.js runs a bounded process listing to identify sibling Respira servers.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationUrlStrings
Source & flagged code
6 flagged · loading sourcedist/install-skills.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
const bundled_skills_dir = path.resolve(__dirname, '..', 'skills');
const c = {
reset: '\x1b[0m',
bold: '\x1b[1m',
dim: '\x1b[2m',
red: '\x1b[31m',
green: '\x1b[32m',
yellow: '\x1b[33m',
blue: '\x1b[34m',
cyan: '\x1b[36m',
};
function parseargs(argv) {
const opts = {
dest: path.join(os.homedir(), '.claude', 'skills'),
force: false,
help: false,
};
for (let i = 0; i < argv.length; i++) {
const arg = argv[i];
if (arg === '--help' || arg === '-h') {
opts.help = true;
}
else if (arg === '--force' || arg === '-f') {
opts.force = true;
}
else if (
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/install-skills.jsView on unpkgdist/config.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2
High
Semantic Analysis Limited
Findings
3 High2 Medium7 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/install-skills.js
HighSemantic Analysis Limiteddist/config.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/server.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/config.js
Affected versions and remediation
This report applies to @respira/wordpress-mcp-server@8.3.39.
See all versions of @respira/wordpress-mcp-server for other recorded verdicts.
- Review the evidence and your use of @respira/wordpress-mcp-server@8.3.39 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.