BuiltByGo/wphealthkit-mcp

github
github analyzed 9c3e31d

Security audits for WordPress plugins and themes — 62 verification layers, fix plans and SBOMs.

maintainer
BuiltByGo
licence
—
first seen
2026-08-11
last seen
2026-08-11
releases · 30d
0
github stars
0 reported
short id

BuiltByGo/wphealthkit-mcp is an MCP server distributed on github, maintained by BuiltByGo, tracked here since August 2026. It has shipped 0 releases and exposes 13 tools. Tools include audit_plugin, audit_plugin_zip, audit_plugins_bulk, check_plugin, flag_finding, generate_sbom, and 7 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 13 tools appear to reach filesystem, network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-04: 13 tools added and 9 tools removed.

full security breakdown →

tools

13
  • audit_plugin
  • audit_plugin_zip
  • audit_plugins_bulk
  • check_plugin
  • flag_finding
  • generate_sbom
  • get_findings
  • get_fix_plan
  • get_fix_prompt
  • get_job_status
  • get_report
  • get_telemetry_stats
  • list_usage

release cadence · 90d

0 releases

No releases yet.

recent releases

last 0

No releases yet.