jorgerosalCommunity·14 Agent Skills Included

wordpress-skills

WordPress code review, security audits, and release checks

Reviews WordPress plugins, themes, blocks, WooCommerce extensions, REST APIs, and headless WPGraphQL stacks for security, performance, and architecture issues. Catches unbounded queries, missing nonces, HPOS breakage, unsafe migrations, and weak release pipelines before they reach production. Routes findings across eighteen specialist domains with severity labels, line references, and concrete fix guidance.

69|9

↗

npx skills add jorgerosal/wordpress-skills --all -g -y

Available:

Tells the agent how the fourteen WordPress review domains are organized, how to apply shared severity labels, and how to route findings between specialist skills.

All Skills in This Repository (14)

Pure Emerald Level Indicators

📦 In Repo

jorgerosal

wp-wpcli-and-ops

Evaluate WP-CLI implementations and operational scripts in WordPress projects for correctness and safety.

wp-rest-api-development

Automates WordPress REST API code reviews for routes, authorization, validation, and responses.

wp-test-strategy

Prescribe unit, integration, and end-to-end testing strategies for WordPress changes.

wp-block-development

Validate WordPress block code for block.json schemas and rendering lifecycles.

wp-plugin-development

Analyze WordPress plugin architecture for structure issues and optimization opportunities.

wp-security-review

Detect XSS, SQL injection, CSRF, and authorization gaps in WordPress code.

wp-migration-upgrade-review

Review WordPress migration and upgrade routines for safety, idempotency, and data integrity.

wp-performance-review

Identify performance bottlenecks in WordPress codebases with file references and remediation guidance.

wp-phpstan-review

Review WordPress PHPStan configurations, baselines, and CI integration.

wp-admin-ui-development

Audit WordPress admin UIs for capability safety and UX quality.

wp-playground-development

Review WordPress Playground blueprints and CLI workflows for reproducibility and clarity.

wp-accessibility-review

Identify accessibility issues in WordPress UI implementations with severity and file references.

Community

Intermediate

Frequently Asked Questions

FAQPage Schema

How to install wordpress-skills?▼

Run `npx skills add jorgerosal/wordpress-skills --all -g -y` in your terminal to install the full pack globally.

How to review a WordPress plugin for security issues?▼

Open the project and ask for a security review, or run the wp-sec-review command. It detects XSS, SQL injection, CSRF, missing capability checks, and unsafe file uploads with line-level fixes.

Does it check WooCommerce HPOS compatibility?▼

Yes. The WooCommerce skill verifies HPOS declarations, flags direct post access on orders, and reviews payment gateway, cart fragment, and template override patterns.

Does it work with Claude Code and Codex?▼

Yes. The pack ships parallel skill wrappers for both Claude Code and Codex, sharing the same reference library so review behavior stays consistent.

Can it audit an inherited WordPress codebase?▼

Yes. The site audit skill classifies the stack, maps risk areas, and recommends which specialist reviews to run next.