[Ability] security-scan — Run basic security checks #9

Use Case

User says "run a security scan" or "check security". AI runs basic security checks: file permissions on wp-config.php, whether debug mode is on in production, whether salts are default, WordPress version exposure, directory listing enabled.

Checklist

• Writer: Define natural language triggers (keywords), expected response format, read-only or destructive
• PHP Dev: Create includes/abilities/security-scan.php with register_agentic_ability()
• JS Dev: Create src/extensions/abilities/security-scan.js with registerAbility()
• JS Dev: Register in src/extensions/abilities/index.js
• LLM Tester: Add test cases to tests/abilities/core-abilities.test.js
• Build & verify: npm run build and npm run test:abilities

References

• Abilities Guide — full step-by-step
• Third-Party Integration — API reference
• Existing example: includes/abilities/security-scan.php + src/extensions/abilities/security-scan.js

Notes

Check WP_DEBUG, WP_DEBUG_DISPLAY, file permissions via fileperms(), salts via wp_salt() comparison. Readonly. Return findings as a list with severity levels (info/warning/critical).