skills.rest
evolv3ai
evolv3aiCOMMUNITY
Explore all skills by this author →
GitHub

wordpress-plugin-core

Develop secure WordPress plugins with PHP using PSR-4 architectures.

3|Updated Nov 14, 2025
Search Tags:#security#php#coding standards#plugin development#rest api#wordpress#wpdb
One-click install
npx skills add https://github.com/evolv3ai/claude-skills-archive --skill wordpress-plugin-core-evolv3ai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: wordpress-plugin-core
Source: https://github.com/evolv3ai/claude-skills-archive/tree/main/skills/wordpress-plugin-core
Command: npx skills add https://github.com/evolv3ai/claude-skills-archive --skill wordpress-plugin-core-evolv3ai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and templates (resource) and assets (resource) components.

What problem does it solve?

This Skill streamlines the creation of robust, secure, and standards-compliant WordPress plugins, preventing common vulnerabilities and ensuring best practices are followed.

Core Features & Use Cases

  • Secure Plugin Architecture: Implement Simple, OOP, or PSR-4 patterns with built-in security foundations (prefixing, ABSPATH checks, nonces, sanitization, escaping).
  • API Integration: Seamlessly work with WordPress APIs like Settings API, REST API, and AJAX.
  • Database Security: Utilize secure $wpdb queries and understand common database vulnerabilities.
  • Distribution & Updates: Set up auto-updates from GitHub and manage plugin distribution.
  • Use Case: Develop a new WordPress plugin for custom post types and settings, ensuring it's protected against SQL injection, XSS, and CSRF attacks from the start.

Quick Start

Use the wordpress-plugin-core skill to scaffold a new PSR-4 WordPress plugin.

Frequently Asked Questions about wordpress-plugin-core

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a secure WordPress plugin that prevents SQL injection and XSS?▼

To build a secure WordPress plugin, implement built-in security foundations like prefixing, ABSPATH checks, nonces, sanitization, and escaping. Use secure $wpdb queries to prevent SQL injection, XSS, and CSRF vulnerabilities from the start of development.

What is the best way to structure a WordPress plugin using PSR-4?▼

Structuring a WordPress plugin using PSR-4 involves adopting an Object-Oriented Programming architecture. This approach ensures standards-compliant code organization, facilitating maintainable development while adhering to WordPress coding standards.

Can I set up GitHub auto-updates for a custom WordPress plugin?▼

Yes, you can set up GitHub auto-updates for a custom WordPress plugin. This functionality facilitates automatic distribution and updates directly from your GitHub repository, ensuring users always have the latest version.

Do I need to follow WordPress coding standards for plugin development?▼

Yes, you need to follow WordPress coding standards for plugin development. Adhering to these standards ensures your code is robust, consistent, and compatible with the broader WordPress ecosystem, preventing common vulnerabilities.

Why does my WordPress plugin need an ABSPATH check?▼

Your WordPress plugin needs an ABSPATH check to prevent direct file access. This security foundation ensures the plugin code only executes within the WordPress environment, blocking unauthorized direct execution attempts.

Related Skills

Explore More Software Engineering Skills→
adityaarsharmaadityaarsharma
2

orbit-compat-matrix

Check WordPress plugin compatibility across PHP and WordPress versions.

Community
Advanced
wp-mediawp-media
81

compliance

Automates WordPress plugin compliance checks against PHPCS and WordPress.org rules.

Official
Intermediate
wpgauravwpgaurav
14

wp-plugin-quick

Scaffold WordPress plugins with PHP 8+ and coding standards.

Community
Advanced
AJV009AJV009
1

custom-drupal-module

Generate a Drupal 11 module scaffold with PHP 8.2+ syntax and PSR-4 autoloading.

Community
Advanced