wp-plugin-version-diff

Generate unified diff patches between WordPress plugin versions.

Updated Mar 19, 2026
One-click install
npx skills add https://github.com/sjinks/ai-wp-vulnerability-triage --skill wp-plugin-version-diff
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wp-plugin-version-diff
Source: https://github.com/sjinks/ai-wp-vulnerability-triage/tree/main/.agents/skills/wp-plugin-version-diff
Command: npx skills add https://github.com/sjinks/ai-wp-vulnerability-triage --skill wp-plugin-version-diff

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill automates downloading fixed and previous WordPress plugin versions from WordPress.org and diffing them to surface changes for triage and audit purposes.

Core Features & Use Cases

  • Fetches plugin metadata and available versions from the WordPress.org Plugins API
  • Resolves the immediately previous version before fixed_in
  • Downloads both zips, extracts into version-named directories, and writes a recursive unified diff patch
  • Use Case: Compare a vulnerable plugin version against the fixed version to review changes and generate a patch

Quick Start

Run the script with a plugin slug and a fixed version to generate a diff between the two releases.

Frequently Asked Questions about wp-plugin-version-diff

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a diff between two WordPress plugin versions for security triage?

To generate a WordPress plugin version diff for triage, provide a plugin slug and fixed version. The tool fetches metadata, resolves the previous version, downloads both archives, and produces a unified diff patch file.

How does resolving a previous WordPress plugin version work before downloading?

Resolving a previous WordPress plugin version works by querying the WordPress.org Plugins API for available releases, then automatically identifying and selecting the version immediately preceding the specified fixed version for comparison.

Do I need Python 3 and network access to compare WordPress plugin releases?

Yes, you need Python 3 and network access to compare WordPress plugin releases. The tool requires network connectivity to reach the WordPress plugin API to fetch metadata and download the necessary zip archives.

What's the best way to compare a vulnerable plugin version against the fixed version?

The best way to compare a vulnerable plugin version against the fixed version is using an automated diff tool. This approach safely extracts zips into version-named directories and writes a recursive unified diff patch.

What outputs do I get when diffing WordPress plugin archives?

When diffing WordPress plugin archives, you get version strings, download URLs, and a patch file. The patch file contains the recursive unified diff written directly to your project workspace for review.

Can I use this to audit changes across any WordPress plugin release?

Yes, you can use this to audit changes across any WordPress plugin release hosted on WordPress.org. It validates versions, handles zip extraction safely, and surfaces the exact code changes between the two releases.