메뉴
Send a weekly multi-site security digest email aggregating all scan results. Reads JSON logs from wp-multisite sweeps, groups findings by site, and emails a colour-coded HTML digest with one-click attention flags. Use for agency weekly reporting or personal multi-site monitoring.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | wp-digest |
| description | Send a weekly multi-site security digest email aggregating all scan results. Reads JSON logs from wp-multisite sweeps, groups findings by site, and emails a colour-coded HTML digest with one-click attention flags. Use for agency weekly reporting or personal multi-site monitoring. |
| triggers | ["weekly digest","send report email","multi-site report","email summary","weekly security email","digest email"] |
Aggregates all WP-Arsenal JSON logs from a directory into a weekly digest email — one HTML email covering all your sites, with colour-coded severity counts and a clear "needs attention" flag per site.
# Monday 3am — sweep all sites and save JSON logs
python scripts/management/wp-multisite.py \
--script wp-scan \
--output-dir logs/weekly/
# Monday 4am — send digest email
python scripts/management/wp-digest.py \
--logs-dir logs/weekly/ \
--config config/config.yaml # reads alerts.email and smtp.* section
# Print digest to terminal (test mode — no email sent)
python scripts/management/wp-digest.py --logs-dir logs/weekly/ --print-only
# Send via SMTP
python scripts/management/wp-digest.py \
--logs-dir logs/weekly/ \
--to you@example.com \
--smtp-host mail.yourdomain.com \
--smtp-user you@example.com \
--smtp-password "YourAppPassword"
# Send via config file (cleaner — credentials in config.yaml)
python scripts/management/wp-digest.py \
--logs-dir logs/weekly/ \
--config config/config.yaml
# Only show CRITICAL and HIGH findings (less noise)
python scripts/management/wp-digest.py \
--logs-dir logs/weekly/ \
--min-severity HIGH \
--print-only
# Last 24 hours only (for daily digest)
python scripts/management/wp-digest.py \
--logs-dir logs/ \
--hours 24 \
--config config/config.yaml
alerts:
email: "you@example.com" # digest recipient
smtp:
host: "mail.yourdomain.com"
port: 587
user: "alerts@yourdomain.com"
password: "your-smtp-password"
from_addr: "WP-Arsenal <alerts@yourdomain.com>"
Use an App Password (not your account password):
smtp-host: smtp.gmail.com, smtp-port: 587# crontab — weekly sweep Monday 3am, digest Monday 4am
0 3 * * 1 python3 /path/to/wp-multisite.py --script wp-scan --output-dir /var/log/wp-arsenal/weekly/
0 4 * * 1 python3 /path/to/wp-digest.py --logs-dir /var/log/wp-arsenal/weekly/ --config /path/to/config/config.yaml
WP-Arsenal Weekly Security Digest
Period: 2026-06-09 to 2026-06-16 | 5 sites | Min severity: LOW
⚠️ Sites needing attention: client-site3
[client-site1] ✅ Clean
[client-site2] ✅ Clean
[client-site3] 🔴 CRITICAL: 1 🟠 HIGH: 2 ← wp-scan found backdoor
[client-site4] 🟡 MEDIUM: 3
[client-site5] ✅ Clean
Each site expands to show the script, category, and detail of each finding.
Deploy a theme, plugin, or wp-content subset to a WordPress server from a CI/CD pipeline, with automatic pre-deploy backup, post-deploy health check, and automatic rollback on failure. Designed for GitHub Actions, GitLab CI, or any pipeline that can run Python.
Security and integrity audit for WooCommerce stores. Checks REST API key scope, payment gateway exposure, webhook HTTPS enforcement, suspicious $0 orders, exposed wc-logs (PII/payment data), and coupon abuse.
Scaffold and deploy a WordPress child theme via SSH. Generates style.css, functions.php (with correct parent style enqueueing), and index.php. Supports Kadence, Astra, GeneratePress, Hello Elementor, OceanWP, and any custom parent. Can activate the child theme immediately after creation.
Safely switch WordPress themes via SSH with automatic rollback if the site goes down. Records the previous theme for instant rollback. Verifies HTTP 200 before and after the switch.
Security audit of WordPress themes via SSH. Scans for PHP malware patterns, injected scripts, recently modified files, and unexpected file types. Also checks DB for customizer injections and Elementor postmeta payloads. Use after any attack or before going live with a new/inherited theme.
Comprehensive guide to building, maintaining, and recovering Elementor-based WordPress sites. Covers the CSS pipeline, global styles (Kit), common post-attack failures and fixes, Pro vs Free features, and integration with Kadence and Hello Elementor themes.