skills.rest
fernandotellado
fernandotelladoCOMMUNITY
Explore all skills by this author →
Website𝕏@fernandotGitHub

wp-plugin-security

Provides WordPress security framework for sanitization, validation, escaping, nonces, and capabilities.

37|6|Updated Feb 12, 2026
Search Tags:#security#validation#sanitization#wordpress#csrf#nonces
One-click install
npx skills add https://github.com/fernandotellado/ai-skills --skill wp-plugin-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: wp-plugin-security
Source: https://github.com/fernandotellado/ai-skills/tree/main/wp-plugin-security
Command: npx skills add https://github.com/fernandotellado/ai-skills --skill wp-plugin-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

WordPress plugin developers often struggle to implement robust security controls across input handling, data storage, and user interactions. This skill consolidates official WordPress resources into a practical security framework, making it easier to implement safe, robust plugin code.

Core Features & Use Cases

  • Sanitization & Validation: Guidance on selecting the most appropriate sanitization and validation functions for various data sources.
  • Escaping & Output Protection: Best practices to safely render data in HTML attributes, elements, and JS contexts.
  • Nonces & Capabilities: Techniques to prevent CSRF and enforce user permissions across admin and AJAX endpoints.
  • Vulnerability Awareness: Common WordPress-specific vulnerabilities (XSS, CSRF, SQLi) with proven mitigation patterns and code examples.
  • Code Review & Compliance: Checklists and references to WordPress Coding Standards and Security API for secure development.

Quick Start

Apply the WordPress security best practices from this skill to secure plugin code by implementing proper sanitization, validation, escaping, nonces, and capability checks.

Frequently Asked Questions about wp-plugin-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent CSRF in WordPress plugins?▼

Prevent CSRF in WordPress plugins by implementing nonces and capability checks across admin and AJAX endpoints to verify user intent and permissions before processing requests.

What's the best way to sanitize and validate user input in WordPress?▼

Sanitize and validate WordPress user input by selecting appropriate functions based on data source, applying sanitization before storage and validation to ensure data integrity and security.

How do I protect my WordPress plugin from XSS and SQL injection vulnerabilities?▼

Protect WordPress plugins from XSS and SQL injection by applying escaping functions during output rendering and using safe query methods, guided by concrete mitigation patterns and code examples.

Does this WordPress security guidance apply to themes and custom code?▼

Yes, this WordPress security guidance applies to plugins, themes, and custom code, enforcing best practices aligned with the WordPress Security API and Coding Standards across all development.

How do I safely escape output data in WordPress for HTML and JavaScript?▼

Safely escape WordPress output data by using specific escaping functions tailored for HTML attributes, elements, and JavaScript contexts to prevent malicious code execution during rendering.

What security checklist should I follow for WordPress plugin code review?▼

Follow a WordPress plugin security checklist covering sanitization, validation, escaping, nonces, capabilities, and vulnerability mitigation patterns to ensure compliance with WordPress Coding Standards.

Related Skills

Explore More Software Engineering Skills→
adityaarsharmaadityaarsharma
2

orbit-wp-security

Detect security vulnerabilities in WordPress plugin PHP source code via static analysis.

Community
Advanced
sprabyspraby

ai-factory.security-checklist

Audit web applications for OWASP Top 10 vulnerabilities using bash scripts.

Community
Advanced
camelranchentertainmentcamelranchentertainment
1

wordpress-pro

Develop WordPress themes and plugins with coding standards and security practices.

Community
Advanced
tonnychiulabtonnychiulab
1

wp-code-auditor

Analyze WordPress PHP code for SQL injection, XSS, and permission vulnerabilities.

Community
Advanced