code-review

Automate multi-agent WordPress code reviews for PHP themes, blocks, and REST APIs.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/perimetre/ai-toolkit --skill code-review-perimetre
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/perimetre/ai-toolkit/tree/main/plugins/perimetre-wordpress/skills/code-review
Command: npx skills add https://github.com/perimetre/ai-toolkit --skill code-review-perimetre

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

WordPress codebases often accumulate security, performance, and standards gaps during development, review, and collaboration. This Skill provides a structured, multi-agent process to identify and fix those issues across PHP themes, blocks, and REST API extensions.

Core Features & Use Cases

  • Multi-agent security and quality review with explicit checks for nonces, capabilities, input sanitization, and output escaping.
  • Gutenberg/Block and REST API pattern review with best practices, naming, and hooks.
  • Use cases include code review of recent WordPress changes, PR diffs, or feature updates to ensure safe deployments.

Quick Start

Provide a WordPress project diff to initiate the automated multi-agent review and receive a structured assessment.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a WordPress code review for a pull request diff?

To review WordPress code, provide your project diff or pull request changes to initiate a structured, multi-agent assessment that evaluates security, performance, i18n, and coding standards across PHP themes, blocks, and REST API endpoints.

What does a WordPress security audit check for in PHP themes and plugins?

A WordPress security audit checks for nonces, capability validation, input sanitization, and output escaping across PHP themes, blocks, and REST API endpoints to ensure safe deployments and protect against common vulnerabilities.

Can I review Gutenberg block patterns and REST API endpoints for best practices?

Yes, the review assesses Gutenberg blocks and REST API endpoints for best practices, checking naming conventions, hooks, and structural standards to ensure safe, maintainable code deployments.

Does multi-agent code review work with existing WordPress coding standards?

Yes, multi-agent code review applies structured, agent-led steps to evaluate conformance with WordPress coding standards, ensuring automated security audits and maintainable documentation.

What is the best way to ensure WordPress REST API extensions are secure?

The best way to secure WordPress REST API extensions is through an automated multi-agent review that evaluates output escaping, capability checks, and coding standards specifically for REST API endpoints and recent feature updates.