registry / @respira/wordpress-mcp-server / 8.6.9
@respira/wordpress-mcp-server@8.6.9
WordPress MCP server + companion plugin giving AI native access to page builder content, not just the REST API. 261 tools, 365 with WooCommerce, 19 page builders and the Site Editor. Element-level edits, full page creation, HTML to builder conversion, sna
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the flagged agent-file writes require explicit CLI invocation. Setup sends the entered API key to the entered WordPress site's Respira endpoints for a connection test; source inspection found no unrelated credential recipient or concrete attack behavior.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A user runs the setup or skill-install CLI command.
Impact
No unconsented agent control change, credential disclosure to an unrelated recipient, or other attack was established.
Mechanism
Setup adds a server-specific entry to a selected agent configuration, while the skill command copies bundled skills to its selected destination.
AI rationale
The manifest has no install lifecycle hook, and the flagged agent-file writes require explicit CLI invocation. Setup sends the entered API key to the entered WordPress site's Respira endpoints for a connection test; source inspection found no unrelated credential recipient or concrete attack behavior.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines CLI entrypoints and ordinary build/start scripts, with no install lifecycle hook.
- The skill installer copies bundled skills only when its CLI is run, to the selected destination; existing files are skipped unless force is requested.
- Agent configuration installation is an explicit setup branch requiring a supported client and install token; it fetches a server-specific config and merges that entry into the selected client config.
- Setup prompts for the WordPress URL and API key, then sends the key to that site's Respira API endpoints for the user-requested connection test.
- The cited Axios code handles request cancellation; the inspected dependency manifests declare no lifecycle scripts that indicate package behavior.
- The cited runtime files identify the WordPress MCP server, configuration handling, output sanitization, system certificate trust, agent metadata, and plugin-version information.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
6 flagged · loading sourcedist/install-skills.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
const bundled_skills_dir = path.resolve(__dirname, '..', 'skills');
const c = {
reset: '\x1b[0m',
bold: '\x1b[1m',
dim: '\x1b[2m',
red: '\x1b[31m',
green: '\x1b[32m',
yellow: '\x1b[33m',
blue: '\x1b[34m',
cyan: '\x1b[36m',
};
function parseargs(argv) {
const opts = {
dest: path.join(os.homedir(), '.claude', 'skills'),
force: false,
help: false,
};
for (let i = 0; i < argv.length; i++) {
const arg = argv[i];
if (arg === '--help' || arg === '-h') {
opts.help = true;
}
else if (arg === '--force' || arg === '-f') {
opts.force = true;
}
else if (
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/install-skills.jsView on unpkgdist/chat-hygiene.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4
High
Findings
6 High2 Medium4 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/install-skills.js
HighSemantic Analysis Limiteddist/chat-hygiene.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/system-ca.js
HighKnown Malware Source Similaritydist/agent-signature.js
HighKnown Malware Source Similaritydist/chat-hygiene.js
HighKnown Malware Source Similaritydist/server.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @respira/wordpress-mcp-server@8.6.9.
See all versions of @respira/wordpress-mcp-server for other recorded verdicts.
- Review the evidence and your use of @respira/wordpress-mcp-server@8.6.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.