Skip to main content

pressable

Enables management of WordPress hosting on Pressable via API for site creation, backups, and plugin management.

Install this skill

or
0/100

Security score

The pressable skill was audited on Feb 15, 2026 and we found 74 security issues across 3 threat categories, including 1 critical. Review the findings below before installing.

Categories Tested

Security Issues

medium line 92

Curl to non-GitHub URL

SourceSKILL.md
92TOKEN=$(curl -s --location 'https://my.pressable.com/auth/token' \
medium line 98

Curl to non-GitHub URL

SourceSKILL.md
98curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites"
medium line 107

Curl to non-GitHub URL

SourceSKILL.md
107curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites" | jq '.data'
medium line 110

Curl to non-GitHub URL

SourceSKILL.md
110curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}"
medium line 123

Curl to non-GitHub URL

SourceSKILL.md
123curl -s -X DELETE -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}"
medium line 144

Curl to non-GitHub URL

SourceSKILL.md
144curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}/edge-cache"
medium line 147

Curl to non-GitHub URL

SourceSKILL.md
147curl -s -X PUT -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}/edge-cache"
medium line 150

Curl to non-GitHub URL

SourceSKILL.md
150curl -s -X DELETE -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}/edge-cache"
medium line 162

Curl to non-GitHub URL

SourceSKILL.md
162curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}/ondemand-backups"
medium line 184

Curl to non-GitHub URL

SourceSKILL.md
184curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}/plugins"
medium line 217

Curl to non-GitHub URL

SourceSKILL.md
217curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/zones"
medium line 220

Curl to non-GitHub URL

SourceSKILL.md
220curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/zones/{zone_id}/records"
medium line 236

Curl to non-GitHub URL

SourceSKILL.md
236curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/account"
medium line 244

Curl to non-GitHub URL

SourceSKILL.md
244curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/collaborators"
medium line 211

Webhook reference - potential data exfiltration

SourceSKILL.md
211**Note:** Plugin operations are async. Use webhooks for completion status.
medium line 319

Webhook reference - potential data exfiltration

SourceSKILL.md
319**Note:** Don't include `wp` prefix — it's added automatically. Use webhooks for async responses.
medium line 363

Webhook reference - potential data exfiltration

SourceSKILL.md
3632. GitHub sends webhook to Pressable
medium line 391

Webhook reference - potential data exfiltration

SourceSKILL.md
391- Use webhooks for async operation status
high line 53

Path traversal pattern

SourceSKILL.md
53**Agent configuration:** Reference as `{baseDir}/../../.credentials/pressable.json` (relative to workspace).
low line 37

Access to hidden dotfiles in home directory

SourceSKILL.md
37mkdir -p ~/.credentials
low line 38

Access to hidden dotfiles in home directory

SourceSKILL.md
38chmod 700 ~/.credentials
low line 42

Access to hidden dotfiles in home directory

SourceSKILL.md
42// ~/.credentials/pressable.json
low line 50

Access to hidden dotfiles in home directory

SourceSKILL.md
50chmod 600 ~/.credentials/pressable.json
low line 61

Access to hidden dotfiles in home directory

SourceSKILL.md
61ssh-keygen -t ed25519 -f ~/.credentials/pressable-ssh/id_ed25519 -C "pressable-agent"
low line 64

Access to hidden dotfiles in home directory

SourceSKILL.md
64chmod 700 ~/.credentials/pressable-ssh
low line 65

Access to hidden dotfiles in home directory

SourceSKILL.md
65chmod 600 ~/.credentials/pressable-ssh/id_ed25519
medium line 70

Access to hidden dotfiles in home directory

SourceSKILL.md
702. Paste contents of `~/.credentials/pressable-ssh/id_ed25519.pub`
low line 87

Access to hidden dotfiles in home directory

SourceSKILL.md
87CREDS=$(cat ~/.credentials/pressable.json)
low line 269

Access to hidden dotfiles in home directory

SourceSKILL.md
269ssh -i ~/.credentials/pressable-ssh/id_ed25519 {ssh-username}@ssh.pressable.com
medium line 272

Access to hidden dotfiles in home directory

SourceSKILL.md
272**SSH Config (optional):** For easier access, add to `~/.ssh/config`:
low line 278

Access to hidden dotfiles in home directory

SourceSKILL.md
278IdentityFile ~/.credentials/pressable-ssh/id_ed25519
medium line 382

Access to hidden dotfiles in home directory

SourceSKILL.md
382- Store credentials in `~/.credentials/` with `600` permissions
critical line 272

Access to SSH directory

SourceSKILL.md
272**SSH Config (optional):** For easier access, add to `~/.ssh/config`:
low line 8

External URL reference

SourceSKILL.md
8Manage WordPress sites on [Pressable](https://pressable.com) managed hosting.
low line 23

External URL reference

SourceSKILL.md
231. Log in to [my.pressable.com](https://my.pressable.com)
low line 30

External URL reference

SourceSKILL.md
30📚 [Pressable API Setup Guide](https://pressable.com/knowledgebase/connecting-to-the-pressable-api/)
low line 69

External URL reference

SourceSKILL.md
691. Go to [my.pressable.com](https://my.pressable.com) → **Profile** → **Settings** → **SSH Keys**
low line 77

External URL reference

SourceSKILL.md
77📚 [Pressable SSH Key Setup](https://pressable.com/knowledgebase/how-to-create-ssh-keys/)
low line 92

External URL reference

SourceSKILL.md
92TOKEN=$(curl -s --location 'https://my.pressable.com/auth/token' \
low line 98

External URL reference

SourceSKILL.md
98curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites"
low line 107

External URL reference

SourceSKILL.md
107curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites" | jq '.data'
low line 110

External URL reference

SourceSKILL.md
110curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}"
low line 114

External URL reference

SourceSKILL.md
114"https://my.pressable.com/v1/sites" \
low line 119

External URL reference

SourceSKILL.md
119"https://my.pressable.com/v1/sites/{id}/clone" \
low line 123

External URL reference

SourceSKILL.md
123curl -s -X DELETE -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}"
low line 127

External URL reference

SourceSKILL.md
127"https://my.pressable.com/v1/sites/{id}" \
low line 144

External URL reference

SourceSKILL.md
144curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}/edge-cache"
low line 147

External URL reference

SourceSKILL.md
147curl -s -X PUT -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}/edge-cache"
low line 150

External URL reference

SourceSKILL.md
150curl -s -X DELETE -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}/edge-cache"
low line 154

External URL reference

SourceSKILL.md
154"https://my.pressable.com/v1/sites/{id}/edge-cache/defensive-mode" \
low line 162

External URL reference

SourceSKILL.md
162curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}/ondemand-backups"
low line 166

External URL reference

SourceSKILL.md
166"https://my.pressable.com/v1/sites/{id}/ondemand-backups" \
low line 171

External URL reference

SourceSKILL.md
171"https://my.pressable.com/v1/sites/{site_id}/ondemand-backups/{backup_id}/download"
low line 175

External URL reference

SourceSKILL.md
175"https://my.pressable.com/v1/sites/{site_id}/ondemand-backups/{backup_id}"
low line 184

External URL reference

SourceSKILL.md
184curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/sites/{id}/plugins"
low line 188

External URL reference

SourceSKILL.md
188"https://my.pressable.com/v1/sites/{id}/plugins" \
low line 193

External URL reference

SourceSKILL.md
193"https://my.pressable.com/v1/sites/{id}/plugins" \
low line 198

External URL reference

SourceSKILL.md
198"https://my.pressable.com/v1/sites/{id}/plugins/activate" \
low line 202

External URL reference

SourceSKILL.md
202"https://my.pressable.com/v1/sites/{id}/plugins/deactivate" \
low line 207

External URL reference

SourceSKILL.md
207"https://my.pressable.com/v1/sites/{id}/plugins" \
low line 217

External URL reference

SourceSKILL.md
217curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/zones"
low line 220

External URL reference

SourceSKILL.md
220curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/zones/{zone_id}/records"
low line 224

External URL reference

SourceSKILL.md
224"https://my.pressable.com/v1/zones/{zone_id}/records" \
low line 229

External URL reference

SourceSKILL.md
229"https://my.pressable.com/v1/zones/{zone_id}/records/{record_id}"
low line 236

External URL reference

SourceSKILL.md
236curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/account"
low line 240

External URL reference

SourceSKILL.md
240"https://my.pressable.com/v1/account/logs/activity" \
low line 244

External URL reference

SourceSKILL.md
244curl -s -H "Authorization: Bearer $TOKEN" "https://my.pressable.com/v1/collaborators"
low line 248

External URL reference

SourceSKILL.md
248"https://my.pressable.com/v1/collaborators/batch_create" \
low line 284

External URL reference

SourceSKILL.md
284📚 [Pressable SSH Guide](https://pressable.com/knowledgebase/connect-to-ssh-on-pressable/)
low line 307

External URL reference

SourceSKILL.md
307📚 [Pressable WP-CLI Guide](https://pressable.com/knowledgebase/how-to-use-wp-cli/)
low line 315

External URL reference

SourceSKILL.md
315"https://my.pressable.com/v1/sites/{id}/ssh/command" \
low line 367

External URL reference

SourceSKILL.md
367📚 [Pressable Git Deploy Guide](https://pressable.com/knowledgebase/how-deploy-to-your-sites-using-git/)
low line 415

External URL reference

SourceSKILL.md
415**API Base:** `https://my.pressable.com`
low line 417

External URL reference

SourceSKILL.md
417**Docs:** [my.pressable.com/documentation/api/v1](https://my.pressable.com/documentation/api/v1)
Scanned on Feb 15, 2026
View Security Dashboard

Install this skill with one command

/learn @shaunandrews/pressable
GitHub Stars 5
Rate this skill
Categorydevelopment
UpdatedMarch 29, 2026
openclawapibackendfrontend-developerbackend-developerdevops-sreproduct-managertechnical-pmdevelopmentproduct
shaunandrews/agent-skills