plugin-security

Professional Agent Skill for building, auditing, testing, and releasing modern WordPress plugins with Codex, Cursor, and Claude Code.

A WordPress plugin designed for educational purposes, demonstrating techniques used in plugin-based persistence and evasion, to aid in security research and training.​

Static, no-execution security checks for Hermes Agent plugins

DSH plugin security and dependency monitoring for DeepSeek Harness: exact vulnerable paths, breaking updates, and Agent follow-up.

WP Hunter is a bilingual command-line toolkit for collecting WordPress.org and Patchstack VDP targets, downloading verified plugin archives, and running fail-safe Semgrep triage.

This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.2.6`) and marks the site as vulnerable if found. The results are saved in a file (`vuln.txt`) for further analysis.

🐤 Native security canary. Probes what an untrusted plugin can access.

🛡️ WASM security canary. Proves the Wasmtime sandbox blocks every attack the native canary exposes.

A curated list of awesome OpenAI Codex plugins, skills, and resources. The #1 Codex Marketplace. See live plugins at: https://hol.org/registry/plugins

HOL Guard examples and guides for AI agent security

HOL Guard template: pre-configured secure plugin starter with CI

Compatibility, security, isolated install, and rollback doctor for DeepSeek Harness plugin bundles

Reproducible dataset of abandoned WordPress plugins (10K+ active installs, 2+ years no update). Companion to royalplugins.com/plugin-graveyard/. Snapshot June 2026: 176 plugins, 4.93M installs at risk.

One-click local security checkup button for the DeepSeek Harness (DSH) Web UI: read-only checks (!!js config, third-party plugins, credential file perms, instruction files), severity-graded report, plus AI-usable security-review & secure-development guides. / DSH 安全医生：一键本机安全体检插件

Codex Skill：审计 Skill 和 AI agent 工具包的脚本、密钥、外部网络、权限边界与供应链风险

Security-focused OBS Studio launcher with plugin integrity validation, firewall rule management, startup verification, and session protection features.

Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.