WTeam Executor

Description

WTeam Executor adds an AI assistant to WordPress administration. Authorized administrators can describe a problem or task, let the assistant inspect permitted context, and work with supported WordPress interfaces from wp-admin.

Capabilities

• AI assistant on supported WordPress admin screens.
• OpenAI API-key mode and optional ChatGPT account connection.
• Configurable model, analysis rounds, system prompt and launcher position.
• Administrator and Network Super Admin access controls.
• Optional bounded read-only inspection of supported WordPress source and log files. Server-side tools and file/log reads are disabled by default.
• Safe inspection of selected non-secret WordPress configuration values.
• Optional bounded database diagnostics for the active WordPress database, with sensitive-value redaction enabled by default.
• Supported wp-admin visual interaction and multi-step assistant workflows.
• Supported Elementor editor interaction through the assistant interface.

AI connection

Open Executor > Settings and choose either an OpenAI API key or a ChatGPT account connection. API-key mode uses OpenAI’s Responses API. ChatGPT account mode uses a one-time device authorization flow; no OpenAI API key is exposed or created by that connection.

ChatGPT account connection and Codex

The optional ChatGPT account mode lets an administrator explicitly connect an eligible ChatGPT account. OpenAI documents Codex App Server for embedding Codex into products, including ChatGPT-managed authentication and the device-code flow:

https://learn.chatgpt.com/docs/app-server

OpenAI also documents that Codex CLI uses the ChatGPT Codex Responses endpoint when authenticated with ChatGPT:

https://openai.com/index/unrolling-the-codex-agent-loop/

WTeam Executor implements this OpenAI connection directly in PHP so standard WordPress hosting does not need Node.js, shell access or a separate App Server process. Requests go directly to OpenAI-operated authentication and Codex endpoints and are not proxied through a service operated by the plugin author. ChatGPT/Codex availability, models, plan eligibility, rate limits and usage limits are determined by OpenAI and the connected account.

Authentication tokens required to maintain the ChatGPT connection are encrypted with AES-256-GCM using WordPress installation secrets and stored in WordPress user metadata for the connected administrator. WTeam Executor is an independent third-party plugin and is not affiliated with, sponsored by or endorsed by OpenAI.

Database diagnostics

Database diagnostics are optional. The assistant cannot submit raw SQL. Inspection uses bounded structured read requests; allowed tables and columns are validated by the plugin before WordPress prepares and executes the query. Sensitive-value redaction is enabled by default.

External services

WTeam Executor relies on OpenAI as a third-party external AI service. No OpenAI request is made merely by installing or activating the plugin. Requests occur when an authorized administrator configures or actively uses an OpenAI connection, including connecting/checking/disconnecting a ChatGPT account or sending an assistant request.

OpenAI-operated hosts contacted by WTeam Executor:

• https://api.openai.com/ – Responses API requests in API-key mode.
• https://auth.openai.com/ – ChatGPT/Codex device authorization and related authentication/token operations in ChatGPT account mode.
• https://chatgpt.com/ – Codex-backed assistant requests, model discovery and usage information after a ChatGPT account is explicitly connected.

Depending on the task and enabled settings, WTeam Executor may send the administrator’s prompt and conversation history, screenshots of the current WordPress administration/editor screen, visible page/DOM information and controls, WordPress environment metadata, bounded source or log excerpts, and bounded database diagnostic results to OpenAI. This data is sent so the AI service can understand the current WordPress context, analyze the request, provide diagnostic guidance and determine supported assistant actions.

Screenshots and diagnostic data can contain personal, confidential or sensitive information visible in wp-admin or stored by the site. Administrators should review the current screen and task before sending a request. Database diagnostic redaction is enabled by default; disabling it may allow personal or sensitive database values to be sent to OpenAI.

By configuring an OpenAI API key or explicitly connecting a ChatGPT account and using the assistant, the administrator chooses to send the relevant connection/request data and task context described above to OpenAI for processing.

OpenAI Codex App Server documentation:
https://learn.chatgpt.com/docs/app-server

OpenAI service:
https://openai.com/

OpenAI Terms of Use:
https://openai.com/policies/terms-of-use/

OpenAI Privacy Policy:
https://openai.com/policies/privacy-policy/

Data sent to OpenAI is handled by OpenAI according to its applicable terms and privacy policy. Site administrators are responsible for ensuring that their use of OpenAI services and the data they choose to send is appropriate for their site and applicable legal requirements.

Third-party libraries

WTeam Executor bundles html2canvas 1.4.1 under the MIT License.

Source:
https://github.com/niklasvh/html2canvas/tree/v1.4.1

The bundled license is located at assets/vendor/html2canvas/LICENSE.