wordpress-plugin-core

WordPress plugins require input sanitization, output escaping, and prepared statements to prevent SQL injection and XSS. This Skill automatically implements these protections along with nonce verification and capability checks across Simple, OOP, and PSR-4 architectures, eliminating 20+ documented vulnerabilities.

Secure REST endpoints require nonce verification, capability checks, and proper input validation. This Skill generates production-ready REST implementations with built-in security, custom post types, and AJAX handling across functional and object-oriented patterns.

WordPress security requires unique prefixing, ABSPATH checks, nonce verification, and uninstall cleanup. This Skill automates these across activation lifecycles and Settings API usage, saving 67% development time while ensuring compliance with WordPress security standards.

Simple architecture suits small plugins under 5 functions; OOP uses singleton patterns for medium complexity; PSR-4 provides modern namespaced architecture with Composer autoloading. This Skill supports all three, letting you select based on plugin scope and team preferences.

Yes. This Skill handles custom post types, Settings API configuration, and AJAX handlers with built-in sanitization and escaping. It applies security patterns across activation, operation, and uninstall lifecycle stages.

Automated generation prevents SQL injection, XSS, CSRF, improper capability checks, and missing nonce verification. This Skill applies 20+ documented vulnerability protections through standardized sanitization, escaping, and prepared statement patterns.