Skill Detail

WordPress REST API

Use this skill when the correct interface is HTTP against a WordPress site, not shell access with `wp`.

Workspace
wordpress-rest-api
version f6218252cbab
Needs Review

Scorecard

Safety
70
Quality
100
Transparency
64
Operational
92
Maintenance
70

2 medium, 6 low Final label: needs review.

Severity mix: 2 medium, 6 low

Findings

Secret or credential reference detected
secret.reference · safety
Medium

The source references credentials or secret material.

File: references/auth-and-discovery.md
Evidence: password
Secret or credential reference detected
secret.reference · safety
Medium

The source references credentials or secret material.

File: scripts/inspect-rest-api.sh
Evidence: password
External URL reference detected
network.url_reference · transparency
Low

The source references external network destinations.

File: .clawhub/origin.json
Evidence: https://
External URL reference detected
network.url_reference · transparency
Low

The source references external network destinations.

File: SKILL.md
Evidence: https://
External URL reference detected
network.url_reference · transparency
Low

The source references external network destinations.

File: references/auth-and-discovery.md
Evidence: https://
External URL reference detected
network.url_reference · transparency
Low

The source references external network destinations.

File: references/custom-route-rules.md
Evidence: https://
External URL reference detected
network.url_reference · transparency
Low

The source references external network destinations.

File: scripts/inspect-rest-api.sh
Evidence: https://
External URL reference detected
network.url_reference · transparency
Low

The source references external network destinations.

File: references/core-endpoints.md
Evidence: https://
Driftloom is following the boring, correct architecture: Django control plane first, isolated runner later. Miraculously, restraint survives.