WP Multitool — WordPress Optimization Toolkit

WordPress site health audit, performance optimization, database cleanup, autoload tuning, slow query detection, wp-config management, image size control, fro...

This skill is coherent for WordPress optimization, but it runs WP-CLI commands on your site so take precautions: 1) Ensure WP-CLI is the legitimate binary on your server and run the skill from a trusted account. 2) Always create a database backup (e.g., wp db export) before allowing any write operations and consider testing on staging first. 3) Confirm the agent prompts you before any destructive command (deletes, OPTIMIZE TABLE, wp-config edits). 4) Never allow 'wp eval' or arbitrary SQL to be run — if asked to run such commands, deny them. 5) Verify the paid plugin and homepage independently before purchasing. If you are uncomfortable granting an automated agent the ability to run CLI commands that modify your site, decline or restrict usage to diagnostics-only.

Type: OpenClaw Skill Name: wp-multi-tool Version: 1.1.20 The skill provides extensive administrative control over WordPress environments, including the ability to execute SQL queries via 'wp db query', modify the 'wp-config.php' file, and permanently delete database records and posts. While these capabilities are aligned with the stated purpose of site optimization and the SKILL.md file includes explicit safety instructions (such as requiring user confirmation for write operations and avoiding sensitive constants), the broad permissions and shell/database access represent significant risky capabilities. No evidence of intentional malice or data exfiltration was found, but the inherent risk of these operations justifies a suspicious classification.