Build software better, together

Zulut30 / Wordpress-skills

Professional Agent Skill for building, auditing, testing, and releasing modern WordPress plugins with Codex, Cursor, and Claude Code.

javascript php wordpress wp-cli wordpress-plugin developer-tools cursor gutenberg wordpress-security block-editor codex plugin-security ai-agent agent-skills claude-code

Updated Jun 7, 2026
JavaScript

notmike101 / Wordpress-Admin-Persistence-Plugin

Star

A WordPress plugin designed for educational purposes, demonstrating techniques used in plugin-based persistence and evasion, to aid in security research and training.

wordpress persistence educational red-team security-research plugin-security

Updated Apr 25, 2025
PHP

MicroMilo / upstream-radar

Star

Always-on compatibility testing for DeepSeek Harness plugins: exact releases, isolated runners, and fixable upstream issues.

Updated Oct 14, 2026
TypeScript

mauricemohr88-debug / hermes-plugin-guard

Star

Static, no-execution security checks for Hermes Agent plugins

python static-analysis sarif github-actions plugin-security hermes-agent

Updated Aug 31, 2026
Python

dushaobindoudou / dsh-plugin-security

Star

Security gate for DeepSeek Harness plugins: npm advisory audit, static evidence, a call-time Allow once / Allow / Disable prompt, plugin-manager sync, and agent review.

security ai static-analysis dsh npm-audit plugin-security supply-chain-security deepseek deepseek-harness dsh-plugin

Updated Oct 11, 2026
JavaScript

rogerdigital / dsh-vet

Star

Security vetting for DeepSeek Harness (DSH) plugins: permission & supply-chain audits before install, graded via the open dsh-vet/v1 report standard.

security-audit static-analysis supply-chain dsh plugin-security deepseek deepseek-harness dsh-plugin

Updated Sep 20, 2026
TypeScript

Aryoksss / wp-hunter

Star

WP Hunter is a bilingual command-line toolkit for collecting WordPress.org and Patchstack VDP targets, downloading verified plugin archives, and running fail-safe Semgrep triage.

python cli wordpress bug-bounty wordpress-security vulnerability-research plugin-security semgrep

Updated Oct 13, 2026
Python

This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.2.6`) and marks the site as vulnerable if found. The results are saved in a file (`vuln.txt`) for further analysis.

python wordpress vulnerability wordpress-security vulnerability-detection security-tools vulnerability-scanner plugin-security cve-scanner cve-2024-10508 registrationmagic

Updated May 30, 2026
Python

motao123 / ETS2LA-Hardened-CN

Star

Security-hardened ETS2LA fork for ETS2/ATS with verified plugin installation, fail-safe control output, reproducible builds, and Chinese developer docs.

github-pages csharp dotnet avalonia self-driving american-truck-simulator euro-truck-simulator-2 plugin-security lane-assist ets2la driving-assistance

Updated Sep 9, 2026
C#

dhrupo / wcsylhet26

Star

Talk materials for "Find It, Fix It, Prove It" — using AI to find, fix, and prove WordPress plugin security fixes. WordCamp Sylhet 2026.

wordpress security ai wordcamp wordpress-security claude talk-slides plugin-security

Updated Oct 7, 2026

Mengshang-spec / dsh-plugin-trustlens

Star

Read-only DSH plugin security auditor with current-session model review

plugin-security deepseek-harness dsh-plugin

Updated Aug 27, 2026
JavaScript

CorvidLabs / fledge-plugin-canary

Star

🐤 Native security canary. Probes what an untrusted plugin can access.

security native canary fledge plugin-security fledge-plugin

Updated Sep 29, 2026
Shell

tcdoverlord / OBS-Windows-Safe-Launch

Star

Security-focused OBS Studio launcher with plugin integrity validation, firewall rule management, startup verification, and session protection features.