plugin-audit
List installed plugins, classify (essential / safe / risky / abandoned), surface ones with known CVEs. Use monthly per site, or after every WP migration.
来源信息
- 仓库
- jezweb/office-town-pack-wordpress
- 最近来源活动
- 2026年5月26日 17:12
- 检测到的 SKILL.md 语言
- 英语
- 星标
- 0
- Forks
- 0
安装方式
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
检查来源文件
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
正在显示 SKILL.md
SKILL.md
来源说明 · 只读预览- name
- plugin-audit
- description
- List installed plugins, classify (essential / safe / risky / abandoned), surface ones with known CVEs. Use monthly per site, or after every WP migration.
# Plugin audit
Most WP sites have plugins that haven't been touched in years. Audit finds the risk.
## Steps
1. List plugins (WP-CLI `plugin list --status=active` or Rocket.net MCP)
2. Per plugin: name, version installed, latest available, last update date, author
3. Classify:
- **Essential**: actively used + actively maintained
- **Safe**: not actively used but maintained and clean
- **Risky**: known CVE OR > 1 year since last update
- **Abandoned**: > 2 years since last update OR removed from repo
4. Cross-check against the WPVulnDB / Patchstack feed
5. Surface findings to `wiki/properties/websites/<domain>/plugin-audit-<date>.md`
## Report shape
```yaml
---
kind: plugin-audit
domain: <domain>
audited_on: <date>
total: <n>
essential: <n>
safe: <n>
risky: <n>
abandoned: <n>
---
## Risky plugins
[Per-plugin: name, version, vulnerability, suggested action]
## Abandoned plugins
[Per-plugin: name, last update, suggested replacement]
## Actions
1. Update [list] (low risk)
2. Replace [list] (need alternative)
3. Remove if unused [list]
```
在 GitHub 查看