wp-abilities-api
Build WordPress Abilities API Integrations
WordPress abilities can fail because of registration order, metadata, permissions, or REST configuration. This skill provides focused implementation and troubleshooting guidance.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "wp-abilities-api" from https://skillstore.io/skills/automattic-wp-abilities-api.md and its manifest at https://skillstore.io/api/skills/automattic-wp-abilities-api/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "wp-abilities-api". Plan a read-only site information ability for my plugin.
Expected outcome:
- Register the category before the ability using the dedicated category hook.
- Use a stable namespaced identifier and mark the ability as read-only.
- Expose it through REST only when clients require access.
- Define output validation and test registration plus REST visibility.
Using "wp-abilities-api". Why does my ability not appear in the REST response?
Expected outcome:
Check that registration runs on the ability initialization hook, the category already exists, REST visibility is enabled, and the expected route is queried.
Using "wp-abilities-api". Review a data-changing ability before release.
Expected outcome:
The review identifies permission checks, input validation, stable identifiers, registration timing, REST exposure, output expectations, and focused PHP and JavaScript tests.
Security Audit
SafeAll 26 static findings are false positives caused by Markdown backticks around identifiers, paths, package names, and references. None invokes a shell or Ruby interpreter. No prompt injection or other intent-level security issue was found.
Risk Factors
⚙️ External commands (26)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/automattic-wp-abilities-api/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/automattic-wp-abilities-api?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/automattic-wp-abilities-api?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/automattic-wp-abilities-api/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/automattic-wp-abilities-api.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
Automattic. (2026). wp-abilities-api security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/automattic-wp-abilities-api/audits/9BibTeX citation
@techreport{automattic-automattic-wp-abilities-api-2026,
author = {Automattic},
title = {wp-abilities-api security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/automattic-wp-abilities-api/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "wp-abilities-api security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "Automattic"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/automattic-wp-abilities-api/audits/9"
identifiers:
- type: other
value: "skillstore:automattic-wp-abilities-api:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: HighWhat You Can Build
Register a plugin ability
Create a namespaced category and ability with correct hooks, metadata, schemas, and permissions.
Expose abilities to clients
Configure REST visibility and verify that registered abilities appear through the expected namespace.
Diagnose a missing ability
Trace registration timing, metadata, route selection, JavaScript dependencies, and caching.
Try These Prompts
Review this WordPress project and determine whether the Abilities API is available. Report version constraints and required project context.
Plan a namespaced read-only ability for this plugin. Specify its category, registration hooks, metadata, input, output, and verification steps.
Investigate why this registered ability is missing from REST responses. Check hook order, metadata, identifiers, routes, permissions, and caches.
Audit this PHP and JavaScript Abilities API integration. Assess registration, schemas, permissions, REST exposure, client usage, tests, and compatibility.
Best Practices
- Register categories before abilities using the dedicated initialization hooks.
- Use stable namespaced identifiers and explicit input and output schemas.
- Require permission callbacks for abilities that modify data.
Avoid
- Do not register abilities outside the documented initialization hook.
- Do not expose an ability through REST without reviewing permissions and data sensitivity.
- Do not change published ability identifiers without treating the change as breaking.
Frequently Asked Questions
Which WordPress versions does this skill target?
Can it register categories and abilities?
Can it help with REST visibility?
Does it cover JavaScript clients?
Does every ability need a permission callback?
Does this skill run a WordPress environment?
Developer Details
Author
AutomatticLicense
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Ref
89edfdc710d0846129dcee6a929477b04f08052c
Maintenance freshness
7/24/2026
Usage
8 downloads · 273 views
File structure