Add gem prerequisite check and improve WPScan error messages

Copilot · PDowney · web-flow · commit 9cec5e43c1ba · 2026-04-10T20:35:55.000Z
Agent-Logs-Url: https://github.com/EngineScript/EngineScript/sessions/a89a56b0-59f6-4948-be10-d575617f71bc Co-authored-by: PDowney <11467177+PDowney@users.noreply.github.com>
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,13 @@ Changes are organized by date, with the most recent changes listed first.
 
 ## 2026-04-10
 
+### 🔒 WPSCAN PREREQUISITE CHECK AND ERROR MESSAGE IMPROVEMENTS
+
+- Added a prerequisite check for the `gem` command availability in `scripts/install/tools/security/wpscan.sh` to provide a clearer error message if Ruby/RubyGems is not installed or not in PATH.
+- Updated the `gem install wpscan` failure error message to include specific troubleshooting steps: rerunning with `--verbose` flag and links to RubyGems command reference and issue tracker.
+
+## 2026-04-10
+
 ### 🐛 VHOST IMPORT LOGGING / EXTRACTION FLOW FIXES
 
 - Removed a duplicate WordPress extraction block in `scripts/functions/vhost/vhost-import.sh` that re-ran archive extraction and wp-config path detection after those steps had already completed.
diff --git a/scripts/install/tools/security/wpscan.sh b/scripts/install/tools/security/wpscan.sh
@@ -19,6 +19,7 @@ source /usr/local/bin/enginescript/scripts/functions/shared/enginescript-common.
 # Start Main Script
 
 # WPScan
-gem install wpscan || { echo "Error: Failed to install WPScan via gem. Check logs or documentation for troubleshooting." >&2; exit 1; }
+command -v gem >/dev/null 2>&1 || { echo "Error: RubyGems (gem) is not installed or not in PATH. Please install Ruby/RubyGems before installing WPScan." >&2; exit 1; }
+gem install wpscan || { echo "Error: Failed to install WPScan via gem. For troubleshooting, rerun with 'gem install wpscan --verbose' and see https://guides.rubygems.org/command-reference/ and https://github.com/rubygems/rubygems/issues." >&2; exit 1; }
 
 print_install_banner "WPScan"
