WordPress REST API

Work with the WordPress REST API for route discovery, authentication, reads and writes, core endpoint selection, and custom namespace inspection. Use when a...

This skill appears to do what it says: discover and inspect WordPress /wp-json routes. Before installing or running it, verify the agent environment has curl and python3 available (the script relies on them). Do not pass long-lived credentials directly on the command line — prefer temporary application passwords and a secure secret manager; the script currently accepts --app-password which can expose secrets via process listings. Be aware the script follows redirects and will make HTTP requests to any provided URL, so running it from an agent with network access can be used to probe internal services; only run it in environments you trust. If you plan to use this in production, consider hardening the script to read passwords from stdin or a protected file/socket and to optionally disable following redirects.

Type: OpenClaw Skill Name: wordpress-rest-api Version: 0.6.0 The skill bundle provides a legitimate set of tools and documentation for interacting with the WordPress REST API. The primary script, `scripts/inspect-rest-api.sh`, uses `curl` and a Python helper to discover routes and inspect endpoints, restricted to safe HTTP methods (GET and OPTIONS). The documentation in `SKILL.md` and the `references/` directory correctly guides the agent on authentication and discovery workflows without any evidence of malicious intent, data exfiltration, or prompt injection.