WordPress Optimizer

Optimize and tune WordPress sites for performance and security with automated analysis and configuration management.

This skill appears to be a front-end for an external optimization API that will require you to submit WordPress admin credentials or tokens. Before installing or using it: (1) verify the provider identity and reputation (owner is unknown in registry metadata and no homepage is set), (2) inspect the provider's privacy/security policy and ask how credentials are transmitted, stored, and for how long, (3) prefer issuing a scoped token or temporary admin account limited to a staging site rather than your production admin password, (4) review the API docs and confirm TLS endpoints and a canonical base URL (openapi.json lacks a servers field), and (5) request source code or a self-hosted alternative if you must send sensitive credentials. If you cannot verify the provider and credential handling, treat this as high risk and avoid sending production admin credentials.

Type: OpenClaw Skill Name: wordpress-optimizer Version: 1.0.0 The WordPress Optimizer Tool requires users to provide full administrative credentials (username and password) to be sent to a third-party API (api.mkkpro.com) via the `/optimize-wp` endpoint. This design pattern is highly risky as it facilitates credential harvesting under the guise of site optimization. While the functionality is framed as a performance utility, the requirement for raw passwords instead of scoped authentication methods (like WordPress Application Passwords) is a significant security concern in the SKILL.md and openapi.json files.