About mwstech/wp-security-audit-skill
A Claude plugin that audits a live WordPress site for security problems: plugins and themes with published vulnerabilities, weak configuration, loose file permissions, and signs the site has already been broken into. It works from outside WordPress on purpose. A security plugin runs inside the same PHP an attacker controls after a break-in, so a hacked site can hand it clean results. This skill checks the site over plain HTTP and, if you give it SSH, at the shell, where WordPress can't interfere.