registry / @respira/wordpress-mcp-server / 8.6.7
@respira/wordpress-mcp-server@8.6.7
WordPress MCP server + companion plugin giving AI native access to page builder content, not just the REST API. 253 tools, 357 with WooCommerce, 19 page builders and the Site Editor. Element-level edits, full page creation, HTML to builder conversion, sna
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the reviewed setup and skill installation behavior is command-driven and consistent with the package's WordPress integration. Scanner similarity and configuration hints did not establish a concrete attack.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user invokes the setup or skill installation command.
Impact
No confirmed unauthorized credential disclosure, lifecycle mutation, or agent-control change was established.
Mechanism
The skill installer copies bundled files into a selected skills directory; setup tests a supplied WordPress site and can write client configuration.
AI rationale
The manifest has no install lifecycle hook, and the reviewed setup and skill installation behavior is command-driven and consistent with the package's WordPress integration. Scanner similarity and configuration hints did not establish a concrete attack.
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes server, setup, and skill installer commands but defines no install lifecycle hook; setup and skill installation are invoked through explicit commands.
- dist/install-skills.js copies bundled skills to the selected skills directory when invoked, skips existing skills by default, and requires --force to overwrite them.
- dist/setup.js sends supplied WordPress credentials to the configured site's WordPress API for connection checks; its version check queries registry.npmjs.org.
- The reviewed source shows package-aligned Respira requests, local config handling, and helper behavior; no concrete malicious transfer or unconsented agent-control mutation was established.
Evidence against
- Scanner similarity and agent-configuration findings identify source for review but do not establish malicious behavior; the inspected skill installation is an explicit command.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
7 flagged · loading sourcedist/install-skills.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
const bundled_skills_dir = path.resolve(__dirname, '..', 'skills');
const c = {
reset: '\x1b[0m',
bold: '\x1b[1m',
dim: '\x1b[2m',
red: '\x1b[31m',
green: '\x1b[32m',
yellow: '\x1b[33m',
blue: '\x1b[34m',
cyan: '\x1b[36m',
};
function parseargs(argv) {
const opts = {
dest: path.join(os.homedir(), '.claude', 'skills'),
force: false,
help: false,
};
for (let i = 0; i < argv.length; i++) {
const arg = argv[i];
if (arg === '--help' || arg === '-h') {
opts.help = true;
}
else if (arg === '--force' || arg === '-f') {
opts.force = true;
}
else if (
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/install-skills.jsView on unpkgdist/chat-hygiene.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4
High
Findings
7 High2 Medium4 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/install-skills.js
HighSemantic Analysis Limiteddist/chat-hygiene.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/system-ca.js
HighKnown Malware Source Similaritydist/agent-signature.js
HighKnown Malware Source Similaritydist/chat-hygiene.js
HighPrevious Version Dangerous Deltadist/server.js
HighKnown Malware Source Similaritydist/server.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @respira/wordpress-mcp-server@8.6.7.
See all versions of @respira/wordpress-mcp-server for other recorded verdicts.
- Review the evidence and your use of @respira/wordpress-mcp-server@8.6.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.