registry / @respira/wordpress-mcp-server / 8.4.4
@respira/wordpress-mcp-server@8.4.4
WordPress MCP server + companion plugin giving AI native access to page builder content, not just the REST API. 242 tools, 346 with WooCommerce, 17 page builders and the Site Editor. Element-level edits, full page creation, HTML to builder conversion, sna
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe reviewed integration writes are user-invoked setup operations, and the manifest has no install lifecycle hook. The inspected sources show no concrete attack behavior.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the setup command with install-config and a client and token, or runs the separate skill installer.
Impact
These commands can update the selected agent configuration or install bundled skills; no package-install-triggered mutation or unrelated agent control change was established.
Mechanism
Setup fetches and merges the named Respira server configuration; the skill installer copies bundled skills and skips existing ones unless force is selected.
AI rationale
The reviewed integration writes are user-invoked setup operations, and the manifest has no install lifecycle hook. The inspected sources show no concrete attack behavior.
Evidence
.claude/skillsclient configuration selected by setup
Network endpoints1
www.respira.press
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes setup and skill installation as separate commands and declares no install lifecycle hook.
- The flagged config location is comment text; executable code describes the active config source.
- The skill installer copies bundled skills when run and skips existing skills unless force is enabled.
- Setup requires an explicit install-config command, an allowed client, and a supplied install token; it fetches the matching server config and merges it into the selected client config.
- The setup endpoint defaults to the Respira website; no credential theft or unrelated configuration mutation was established.
- The server’s bounded process listing supports sibling-process detection.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationUrlStrings
Source & flagged code
6 flagged · loading sourcedist/install-skills.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
const bundled_skills_dir = path.resolve(__dirname, '..', 'skills');
const c = {
reset: '\x1b[0m',
bold: '\x1b[1m',
dim: '\x1b[2m',
red: '\x1b[31m',
green: '\x1b[32m',
yellow: '\x1b[33m',
blue: '\x1b[34m',
cyan: '\x1b[36m',
};
function parseargs(argv) {
const opts = {
dest: path.join(os.homedir(), '.claude', 'skills'),
force: false,
help: false,
};
for (let i = 0; i < argv.length; i++) {
const arg = argv[i];
if (arg === '--help' || arg === '-h') {
opts.help = true;
}
else if (arg === '--force' || arg === '-f') {
opts.force = true;
}
else if (
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/install-skills.jsView on unpkgdist/config.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2
High
Semantic Analysis Limited
Findings
3 High2 Medium7 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/install-skills.js
HighSemantic Analysis Limiteddist/config.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/server.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/config.js
LowAi Review Evidencedist/config.js
Affected versions and remediation
This report applies to @respira/wordpress-mcp-server@8.4.4.
See all versions of @respira/wordpress-mcp-server for other recorded verdicts.
- Review the evidence and your use of @respira/wordpress-mcp-server@8.4.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.