plugin-security

Professional Agent Skill for building, auditing, testing, and releasing modern WordPress plugins with Codex, Cursor, and Claude Code.

A WordPress plugin designed for educational purposes, demonstrating techniques used in plugin-based persistence and evasion, to aid in security research and training.​

Always-on compatibility testing for DeepSeek Harness plugins: exact releases, isolated runners, and fixable upstream issues.

Static, no-execution security checks for Hermes Agent plugins

Security gate for DeepSeek Harness plugins: npm advisory audit, static evidence, a call-time Allow once / Allow / Disable prompt, plugin-manager sync, and agent review.

Security vetting for DeepSeek Harness (DSH) plugins: permission & supply-chain audits before install, graded via the open dsh-vet/v1 report standard.

WP Hunter is a bilingual command-line toolkit for collecting WordPress.org and Patchstack VDP targets, downloading verified plugin archives, and running fail-safe Semgrep triage.

This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.2.6`) and marks the site as vulnerable if found. The results are saved in a file (`vuln.txt`) for further analysis.

Security-hardened ETS2LA fork for ETS2/ATS with verified plugin installation, fail-safe control output, reproducible builds, and Chinese developer docs.

Talk materials for "Find It, Fix It, Prove It" — using AI to find, fix, and prove WordPress plugin security fixes. WordCamp Sylhet 2026.

🐤 Native security canary. Probes what an untrusted plugin can access.

Read-only DSH plugin security auditor with current-session model review

Security-focused OBS Studio launcher with plugin integrity validation, firewall rule management, startup verification, and session protection features.

🛡️ WASM security canary. Proves the Wasmtime sandbox blocks every attack the native canary exposes.

Rust sandbox for AI agents and untrusted code, inspired by OpenAI Codex. OS-enforced isolation on Linux, Windows, and macOS.

Hide commands from tab-complete, block their execution, and keep your plugin list private — per LuckPerms group.

Security research, datasets, and reproducible findings from AgentGuard across AI agents, plugins, MCP ecosystems, and agent runtimes.

Static security review for Omarchy Shell plugins, without executing them

HOL Guard examples and guides for AI agent security

A firewall for Claude Code mods: see what each mod can reach as it loads, and audit, hold or refuse it by your own policy. By RadTech, radtech.nl