Search
Security · WordPress
Skills
Sort:BestMost starsTrending todayTrending this weekTrending this monthNewestRecently updatedName
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Hunting skill for business logic vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter. | elementalsouls/ | 4.8k | 1 repo | ~4.4k | Automated safety check: Pass | MIT | yesterday |
| 2 | A skill your agent uses when configuring, running, or fixing PHPStan static analysis in WordPress projects (plugins/themes/sites): phpstan.neon setup, baselines, WordPress-specific typing, and… | Automattic/ | 211 | 1 repo | ~1k | Automated safety check: Pass | No licence | 8 mo ago |
| 3 | Reviews WordPress plugin, theme and block code after an agent writes or edits it, catching missing escaping, nonces, capability checks and unprepared queries. | amElnagdy/ | 1.3k | — | ~2.4k | Automated safety check: Pass | MIT | 3 mo ago |
| 4 | 4.Keel A skill your agent uses for ANY new software project from idea to release — websites, WordPress/WooCommerce plugins, MCP servers, web apps, components, or libraries. | joseconti/ | 190 | — | ~11k | Automated safety check: Warn | GPL-3.0-or-later | 2 mo ago |
| 5 | Guide to maintain creating modern and secure code while developing WordPress plugins. | duracelltomi/ | 174 | — | ~7.2k | Automated safety check: Pass | GPL-2.0-or-later | yesterday |
| 6 | WordPress PHPStan review and setup guidance. An agent skill from jorgerosal/wordpress-skills. | jorgerosal/ | 103 | — | ~1.2k | Automated safety check: Pass | MIT | 4 mo ago |
| 7 | Web content discovery and technology fingerprinting using gobuster, ffuf, feroxbuster, katana, httpx, and wafw00f | CommonHuman-Lab/ | 157 | — | ~907 | Automated safety check: Pass | Unknown | yesterday |
| 8 | Complete WordPress development workflow covering theme development, plugin creation, WooCommerce integration, performance optimization, and security hardening. | sickn33/ | 47k | 2 repos | ~348 | Automated safety check: Pass | MIT | yesterday |
| 9 | WordPress 框架特效安全审计工具。针对 WordPress 常见 nonce/capability/checkadminreferer、AJAX action、escape/sanitize、重定向、安全上传与远程请求等机制进行白盒静态审计，并映射到通用漏洞类型体系（AUTH/CSRF/XSS/SQL/CFG/SSRF 等）。 | 0xShe/ | 402 | 1 repo | ~666 | Automated safety check: Pass | No licence | 6 mo ago |
| 10 | Identify CMS, frameworks, and server technology stacks on live hosts. | uphiago/ | 1.3k | — | ~2k | Automated safety check: Pass | MIT | 1 mo ago |
| 11 | 11.Visual Recon Screenshot all live hosts for rapid visual triage and technology fingerprinting. | uphiago/ | 1.3k | — | ~1.5k | Automated safety check: Pass | MIT | 1 mo ago |
| 12 | 12.Domain Domain-specific: SAP Commerce, OpenSearch detection, WordPress validation, enterprise search. | notque/ | 441 | — | ~3.7k | Automated safety check: Notes | MIT | yesterday |
| 13 | WordPress plugin development with hooks, security, REST API, custom post types. | secondsky/ | 227 | — | ~4.6k | Automated safety check: Pass | MIT | 12 days ago |
| 14 | Hunting skill for auth bypass vulnerabilities. An agent skill from elementalsouls/Claude-BugHunter. | elementalsouls/ | 4.8k | — | ~8.2k | Automated safety check: Pass | MIT | yesterday |
| 15 | WordPress security code review and vulnerability detection. An agent skill from jorgerosal/wordpress-skills. | jorgerosal/ | 103 | — | ~6.4k | Automated safety check: Pass | MIT | 4 mo ago |
| 16 | Audit PHP web application source for critical vulnerabilities using PHP's specific sink and footgun catalog — object injection via unserialize and phar:// POP chains, type-juggling and magic-hash… | trilwu/ | 157 | — | ~2.8k | Automated safety check: Pass | MIT | 1 mo ago |
| 17 | WordPress security code review for Codex. An agent skill from jorgerosal/wordpress-skills. | jorgerosal/ | 103 | — | ~490 | Automated safety check: Pass | MIT | 4 mo ago |
| 18 | 18.Nuclei Scan Nuclei 漏洞扫描工具使用方法论。当需要对目标进行已知漏洞扫描、CVE 验证、批量 PoC 检测时使用。Nuclei 拥有社区维护的 9000+ 模板，覆盖 CVE、默认口令、配置错误、信息泄露等。任何涉及 nuclei 扫描、CVE 批量验证、PoC 检测、漏洞模板搜索的场景都应使用此技能。也适用于需要从 nuclei 模板中提取 payload 用于手动利用的场景 | wgpsec/ | 1.8k | — | ~1.1k | Automated safety check: Pass | No licence | today |
| 19 | PHP 框架特定安全审计。当在 PHP 白盒审计中已识别目标使用特定框架、 需要检查框架特有安全机制和常见配置缺陷时触发。 | wgpsec/ | 1.8k | — | ~767 | Automated safety check: Notes | No licence | today |
