WordPress Security Scanner

Scan WordPress sites for security vulnerabilities, misconfigurations, and potential threats.

This skill appears to be a thin wrapper around a third-party WordPress scanning API but omits critical operational details (server URL in the OpenAPI, authentication, and how billing is handled). Before installing or invoking it: 1) Verify the publisher and reputation of the external API (toolweb.in / api.mkkpro.com). 2) Confirm whether an API key or account is required and whether the skill will prompt you to supply credentials—do not provide secrets unless you trust the provider. 3) Understand data flow: scans will involve sending target URLs (and possibly response data) to an external service—do not send internal/private site URLs or credentials. 4) Ensure you have permission to scan any target site (unauthorized scanning can be illegal). 5) Prefer skills that declare required env vars or servers clearly; ask the author to add explicit server/auth info and privacy/billing details before use. If you cannot verify the external API or publisher, avoid installing or use only in a controlled, non-production test environment.

Type: OpenClaw Skill Name: wordpress-security-scanner Version: 1.0.0 The WordPress Security Scanner skill bundle is a standard API wrapper for a remote security assessment service. It contains no executable code, only metadata and documentation (SKILL.md, openapi.json) that define how an AI agent should interact with an external API hosted at api.mkkpro.com. No indicators of malicious intent, data exfiltration, or prompt injection were identified.