The Agent can collect approved local WordPress metadata such as inventory, plugin/theme details, roles, runtime posture, REST routes, admin-ajax actions, dependency manifests, file drift, hardening checks, permissions, static code findings, and activity signals.