📦 WordPress Optimizer — WordPress性能优化
v1.0.0一键扫描并优化WordPress站点的性能与安全，自动完成缓存、压缩、数据库清理、插件审计等配置，让网站更快更稳。
0· 142·0 当前·0 累计
by 下载技能包
最后更新
2026/3/23
安全扫描
OpenClaw
可疑
medium confidenceThe skill's stated purpose (optimizing WordPress) is plausible, but instructions implicitly require sending WordPress admin credentials/tokens to an external API run by an unknown provider and lack provenance and handling details, which is a notable risk.
评估建议
This skill appears to be a front-end for an external optimization API that will require you to submit WordPress admin credentials or tokens. Before installing or using it: (1) verify the provider identity and reputation (owner is unknown in registry metadata and no homepage is set), (2) inspect the provider's privacy/security policy and ask how credentials are transmitted, stored, and for how long, (3) prefer issuing a scoped token or temporary admin account limited to a staging site rather than...详细分析 ▾
ℹ 用途与能力
Name and description match the actions described in SKILL.md (site optimization and tuning). Requesting admin username/password or a site token is coherent with an optimization service that must make changes on a WordPress site.
⚠ 指令范围
The SKILL.md describes API endpoints that will require the user's WordPress admin credentials or tokens. It implicitly instructs the agent to submit those secrets to a remote service (references to api.mkkpro.com and portal/toolweb.in), but it does not state where credentials are stored, how they're transmitted/retained, or provide an explicit, trusted base URL in the OpenAPI servers field. There are no instructions to limit the scope of the credentials (e.g., use a temporary admin or scoped token) or to run on a staging site first.
✓ 安装机制
Instruction-only skill with no install spec and no code files — nothing is written to disk by an installer. This minimizes local install risk.
⚠ 凭证需求
No environment variables or binaries are required by the skill metadata, but runtime usage requires users to provide sensitive credentials (admin username/password or tokens) to the service. The skill does not declare or document any primary credential handling, storage, or retention policy, and the provider is not identified in registry metadata, which is disproportionate from a provenance/transparency perspective.
✓ 持久化与权限
The skill is not always-enabled and does not request persistent system privileges. Autonomous invocation is allowed by default but that is normal; there is no evidence the skill modifies other skills or system settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/23
Initial release of WordPress Optimizer Tool. - Automates optimization and tuning of WordPress sites for performance and security. - Supports site-wide optimization (with admin credentials) and performance tuning (with token). - Provides API endpoints for optimize-wp, tune-wp, and service health checks. - Returns actionable performance metrics and improvement recommendations. - Includes multiple pricing tiers for various user needs.
● 可疑
安装命令
点击复制官方npx clawhub@latest install wordpress-optimizer
镜像加速npx clawhub@latest install wordpress-optimizer --registry https://cn.longxiaskill.com