Wordpress Auto Publish Clean

Automatically publish Markdown articles to WordPress blog via REST API

This package appears to do what it says (publish Markdown to WordPress), but there are important caveats: 1) The skill metadata does not declare the WordPress credentials it actually requires—expect to supply WORDPRESS_URL and either an application password or credentials (or configure config.js). 2) Review any shell scripts (scripts/setup-wordpress.sh, install-jwt-complete.sh, etc.) before running them — they may attempt changes on the target server or assume you run them on the WordPress host. 3) Do not provide site admin credentials to the skill unless you trust the code: create a dedicated user with the minimal permissions needed and prefer WordPress application passwords (not your main login password). 4) If you will run scripts on a machine you control, inspect them locally first and run npm install only after reviewing package.json. 5) If you need help assessing specific files (e.g., setup scripts or any file that touches remote endpoints), share those files and I can analyze them line-by-line.

Type: OpenClaw Skill Name: test-wp Version: 1.0.0 The skill bundle contains multiple hardcoded credentials (application passwords and basic auth strings) for a specific external domain (openow.ai) and user (inkmind) across several files, including 'final-test-publish.sh', 'simple-publish-test.sh', and 'test-app-password-publish.sh'. While the core functionality of publishing Markdown to WordPress is consistent with the description, the inclusion of active credentials and an excessive amount of diagnostic and testing scripts targeting a specific live site is a significant security risk and highly irregular for a generic skill. It appears to be a raw development environment dump rather than a curated production skill.