registry / @respira/wordpress-mcp-server / 8.6.8
@respira/wordpress-mcp-server@8.6.8
WordPress MCP server + companion plugin giving AI native access to page builder content, not just the REST API. 261 tools, 365 with WooCommerce, 19 page builders and the Site Editor. Element-level edits, full page creation, HTML to builder conversion, sna
AI Security Review
scanned 3d ago · by lpm-firewall-aiSource inspection found no npm lifecycle hook or concrete attack behavior. Flagged agent configuration and network behavior is tied to explicit commands or user-selected WordPress destinations.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A user invokes the setup or skill-install command.
Impact
The reviewed behavior does not establish unconsented agent-control changes, credential exfiltration, or another attack.
Mechanism
The installer copies bundled skills to its destination; setup retrieves a token-issued config for a selected client. The inspected server write updates Respira’s own local config.
AI rationale
Source inspection found no npm lifecycle hook or concrete attack behavior. Flagged agent configuration and network behavior is tied to explicit commands or user-selected WordPress destinations.
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes server, setup, and skill-installer commands; the inspected scripts contain no npm lifecycle hook.
- The skill installer copies bundled files to a selected destination and skips existing skills unless the user supplies --force.
- The config installer requires an explicit command, selected client, and token; it requests that config from Respira’s website. Setup connection checks send credentials to the WordPress site URL provided for testing.
- The server’s inspected file write merges redeemed site data into Respira’s local config; it does not show an AI-agent configuration write.
- The other flagged files contain chat-output sanitization, certificate loading, and sanitized client identity handling.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscation
Source & flagged code
6 flagged · loading sourcedist/install-skills.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
const bundled_skills_dir = path.resolve(__dirname, '..', 'skills');
const c = {
reset: '\x1b[0m',
bold: '\x1b[1m',
dim: '\x1b[2m',
red: '\x1b[31m',
green: '\x1b[32m',
yellow: '\x1b[33m',
blue: '\x1b[34m',
cyan: '\x1b[36m',
};
function parseargs(argv) {
const opts = {
dest: path.join(os.homedir(), '.claude', 'skills'),
force: false,
help: false,
};
for (let i = 0; i < argv.length; i++) {
const arg = argv[i];
if (arg === '--help' || arg === '-h') {
opts.help = true;
}
else if (arg === '--force' || arg === '-f') {
opts.force = true;
}
else if (
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/install-skills.jsView on unpkgdist/chat-hygiene.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4
High
Findings
6 High2 Medium4 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/install-skills.js
HighSemantic Analysis Limiteddist/chat-hygiene.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/system-ca.js
HighKnown Malware Source Similaritydist/agent-signature.js
HighKnown Malware Source Similaritydist/chat-hygiene.js
HighKnown Malware Source Similaritydist/server.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @respira/wordpress-mcp-server@8.6.8.
See all versions of @respira/wordpress-mcp-server for other recorded verdicts.
- Review the evidence and your use of @respira/wordpress-mcp-server@8.6.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.