plugin-security

Professional Agent Skill for building, auditing, testing, and releasing modern WordPress plugins with Codex, Cursor, and Claude Code.

A WordPress plugin designed for educational purposes, demonstrating techniques used in plugin-based persistence and evasion, to aid in security research and training.​

Always-on compatibility testing for DeepSeek Harness plugins: exact releases, isolated runners, and fixable upstream issues.

Static, no-execution security checks for Hermes Agent plugins

WP Hunter is a bilingual command-line toolkit for collecting WordPress.org and Patchstack VDP targets, downloading verified plugin archives, and running fail-safe Semgrep triage.

Security-hardened ETS2LA fork for ETS2/ATS with verified plugin installation, fail-safe control output, reproducible builds, and Chinese developer docs.

This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.2.6`) and marks the site as vulnerable if found. The results are saved in a file (`vuln.txt`) for further analysis.

One-click local security checkup button for the DeepSeek Harness (DSH) Web UI: read-only checks (!!js config, third-party plugins, credential file perms, instruction files), severity-graded report, plus AI-usable security-review & secure-development guides. / DSH 安全医生：一键本机安全体检插件

🐤 Native security canary. Probes what an untrusted plugin can access.

Read-only DSH plugin security auditor with current-session model review

Security vetting for DeepSeek Harness (DSH) plugins: permission & supply-chain audits before install, graded via the open dsh-vet/v1 report standard.

Security-focused OBS Studio launcher with plugin integrity validation, firewall rule management, startup verification, and session protection features.

🛡️ WASM security canary. Proves the Wasmtime sandbox blocks every attack the native canary exposes.

Compatibility, security, isolated install, and rollback doctor for DeepSeek Harness plugin bundles

Security research, datasets, and reproducible findings from AgentGuard across AI agents, plugins, MCP ecosystems, and agent runtimes.

HOL Guard examples and guides for AI agent security

Reproducible dataset of abandoned WordPress plugins (10K+ active installs, 2+ years no update). Companion to royalplugins.com/plugin-graveyard/. Snapshot June 2026: 176 plugins, 4.93M installs at risk.

Static security review for Omarchy Shell plugins, without executing them

面向 DeepSeek Harness 的 agent 专用插件调查与安装工具桥。它不提供设置页、可视化市场、客户端 bundle 或 Web 路由。

A curated list of awesome OpenAI Codex plugins, skills, and resources. The #1 Codex Marketplace. See live plugins at: https://hol.org/registry/plugins