Audit & diagnose

WordPress Security Review

Most security checks grade a site on whether a security plugin is installed. This one checks core files, administrators, credentials and known vulnerabilities, and says what it could not see.

RP
Respira Core · maintained skill ·v1.0.0 · MIT
total installs
no ratings yet
undefined%
success rate
today
last updated

About this skill

Run the Respira security audit, read its indicators, coverage and known vulnerabilities honestly, and fix what it finds one approved update at a time. Never calls a site clean when a check did not run.

Read-only by default. Any write operation creates a duplicate first, so the original page stays intact and you have an undo handle. All execution runs through Respira's MCP server with your existing credentials.

What it does

4 capabilities run in one pass — each one focused on a single failure mode.

Evidence, not plugin names

Core checksums against WordPress.org, every administrator and application password, executable files where they should not be, and compromise indicators, each with a note.

Known vulnerabilities

Installed core, plugin and theme versions matched against the Wordfence vulnerability database, each with the version that fixes it (plugin 9.0 and later).

Honest coverage

A partial scan is reported as partial and an unreachable vulnerability database as not checked. The report never rounds either up to clean.

Fixes behind approval

Plugin, theme and core security updates one at a time, each approval-gated, with a home-page check between steps. Nothing is deleted or revoked without an explicit yes.

What you'll likely find

Real issues this skill has surfaced on real WordPress sites.

  • A plugin with a known vulnerability whose fix is one update away.
  • An administrator account created recently that the owner should confirm.
  • An application password on an administrator account nobody recognises.
  • An uploads scan that reached its limit, reported as partial rather than clean.

What you'll need

Respira for WordPress plugin installed on the target site, with a valid API key.

An AI agent that supports Skills + MCP — Claude Code, Codex, Antigravity, or Cursor.

SKILL.md saved where your agent looks for skills (see install panel above).

Community feedback

What people say

Rate this skill and share what worked (or what needs to improve).

Community rating

/ 5

0 ratings

See reviews
5
0
4
0
3
0
2
0
1
0

Leave a rating

Community feedback

Your rating

500 chars left

Community Ratings

Showing: Most helpful

No ratings yet. Be the first to leave one.

One agent. Many skills.

Browse the full catalog or build your own — the bar is low and the standards are real.

Browse all skills Contribute on GitHub