plugin-security

Professional Agent Skill for building, auditing, testing, and releasing modern WordPress plugins with Codex, Cursor, and Claude Code.

A WordPress plugin designed for educational purposes, demonstrating techniques used in plugin-based persistence and evasion, to aid in security research and training.​

Static, no-execution security checks for Hermes Agent plugins

Always-on compatibility testing for DeepSeek Harness plugins: exact releases, isolated runners, and fixable upstream issues.

Plugin Detection and Response for DeepSeek Harness - pre-install health card, per-plugin runtime attribution of fs/network/subprocess, boundary judging, opt-in blocking. Local-first, no telemetry.

Security gate for DeepSeek Harness plugins: npm advisory audit, static evidence, a call-time Allow once / Allow / Disable prompt, plugin-manager sync, and agent review.

Security vetting for DeepSeek Harness (DSH) plugins: permission & supply-chain audits before install, graded via the open dsh-vet/v1 report standard.

WP Hunter is a bilingual command-line toolkit for collecting WordPress.org and Patchstack VDP targets, downloading verified plugin archives, and running fail-safe Semgrep triage.

This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.2.6`) and marks the site as vulnerable if found. The results are saved in a file (`vuln.txt`) for further analysis.

Security-hardened ETS2LA fork for ETS2/ATS with verified plugin installation, fail-safe control output, reproducible builds, and Chinese developer docs.

A firewall for Claude Code mods: see what each mod can reach as it loads, and audit, hold or refuse it by your own policy. By RadTech, radtech.nl

Talk materials for "Find It, Fix It, Prove It" — using AI to find, fix, and prove WordPress plugin security fixes. WordCamp Sylhet 2026.

🐤 Native security canary. Probes what an untrusted plugin can access.

Read-only DSH plugin security auditor with current-session model review

🛡️ WASM security canary. Proves the Wasmtime sandbox blocks every attack the native canary exposes.

Security sandbox for Hermes Agent plugins: test any plugin in a disposable, no-network Docker container with decoy secrets before you install it. Shows what it actually did, mapped to MITRE ATT&CK and ATLAS. Hermes Security reviews code you wrote; Detonator tests code you didn’t.

Rust sandbox for AI agents and untrusted code, inspired by OpenAI Codex. OS-enforced isolation on Linux, Windows, and macOS.

Hide commands from tab-complete, block their execution, and keep your plugin list private — per LuckPerms group.

Security-focused OBS Studio launcher with plugin integrity validation, firewall rule management, startup verification, and session protection features.

面向 DeepSeek Harness 的 agent 专用插件调查与安装工具桥。它不提供设置页、可视化市场、客户端 bundle 或 Web 路由。