plugin-audit
List installed plugins, classify (essential / safe / risky / abandoned), surface ones with known CVEs. Use monthly per site, or after every WP migration.
Informações da origem
- Repositório
- jezweb/office-town-pack-wordpress
- Última atividade na origem
- 26 de maio de 2026 às 17:12
- Idioma detectado do SKILL.md
- inglês
- Estrelas
- 0
- Forks
- 0
Opções de instalação
Por padrão, está selecionado o prompt que primeiro revisa a origem. Você pode mudar para um comando direto ou baixar uma cópia local.
Revise os arquivos de origem
Leia o SKILL.md e os arquivos complementares exibidos pelo SkillsMP antes de decidir se vai instalar.
Exibindo SKILL.md
SKILL.md
Instruções da origem · Visualização somente leitura- name
- plugin-audit
- description
- List installed plugins, classify (essential / safe / risky / abandoned), surface ones with known CVEs. Use monthly per site, or after every WP migration.
# Plugin audit
Most WP sites have plugins that haven't been touched in years. Audit finds the risk.
## Steps
1. List plugins (WP-CLI `plugin list --status=active` or Rocket.net MCP)
2. Per plugin: name, version installed, latest available, last update date, author
3. Classify:
- **Essential**: actively used + actively maintained
- **Safe**: not actively used but maintained and clean
- **Risky**: known CVE OR > 1 year since last update
- **Abandoned**: > 2 years since last update OR removed from repo
4. Cross-check against the WPVulnDB / Patchstack feed
5. Surface findings to `wiki/properties/websites/<domain>/plugin-audit-<date>.md`
## Report shape
```yaml
---
kind: plugin-audit
domain: <domain>
audited_on: <date>
total: <n>
essential: <n>
safe: <n>
risky: <n>
abandoned: <n>
---
## Risky plugins
[Per-plugin: name, version, vulnerability, suggested action]
## Abandoned plugins
[Per-plugin: name, last update, suggested replacement]
## Actions
1. Update [list] (low risk)
2. Replace [list] (need alternative)
3. Remove if unused [list]
```
Ver no GitHub