Skills wordpress-dev

📦

wordpress-dev

Name: wordpress-dev
Author: CrazySwami

Content revision r1 Safe ⚙️ External commands🌐 Network access📁 Filesystem access

Build Safer WordPress Plugins and Themes

WordPress projects need secure patterns, fast queries, and consistent structure. This skill gives Claude, Codex, and Claude Code practical guidance and templates for theme and plugin development.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "wordpress-dev" from https://skillstore.io/skills/crazyswami-wordpress-dev.md and its manifest at https://skillstore.io/api/skills/crazyswami-wordpress-dev/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/crazyswami-wordpress-dev.md Signed manifest GET /api/skills/crazyswami-wordpress-dev/manifest Signed lockfile GET /api/skills/crazyswami-wordpress-dev/lockfile

Test it

Using "wordpress-dev". Create a property custom post type for a real estate site.

Expected outcome:

A prefixed registration plan for the property post type.
Recommended labels, supports, rewrite settings, and admin columns.
Security notes for capabilities, escaping, and translation-ready strings.

Using "wordpress-dev". Review this AJAX callback for security.

Expected outcome:

A checklist of nonce, capability, sanitization, and escaping issues.
Concrete WordPress API replacements for unsafe patterns.
A short explanation of the remaining manual tests.

Using "wordpress-dev". Improve performance for this theme asset loading.

Expected outcome:

Recommendations for enqueue dependencies, versioning, and footer loading.
Caching and conditional loading suggestions.
Notes about what to verify in a browser and production-like environment.

Security Audit

Safe

v10 • 7/9/2026 Open versioned report

Static analysis flagged many risky-looking patterns, but review found they are Markdown examples, WordPress templates, plugin reference links, and an explicit scaffold generator. No prompt injection, credential exfiltration, hidden network callback, or malicious persistence intent was found in the reviewed evidence.

Files scanned

5,786

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (35)

🌐 Network access (36)

📁 Filesystem access (3)

docs/performance.md:427 SKILL.md:102 SKILL.md:109

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/crazyswami-wordpress-dev/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/crazyswami-wordpress-dev/security.svg)](https://skillstore.io/skills/crazyswami-wordpress-dev?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/crazyswami-wordpress-dev?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/crazyswami-wordpress-dev/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/crazyswami-wordpress-dev.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

CrazySwami. (2026). wordpress-dev security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/crazyswami-wordpress-dev/audits/10

BibTeX citation

@techreport{crazyswami-crazyswami-wordpress-dev-2026,
  author = {CrazySwami},
  title = {wordpress-dev security audit report (audit version 10)},
  institution = {Skillstore},
  year = {2026},
  number = {10},
  url = {https://skillstore.io/skills/crazyswami-wordpress-dev/audits/10},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "wordpress-dev security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
  - name: "CrazySwami"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/crazyswami-wordpress-dev/audits/10"
identifiers:
  - type: other
    value: "skillstore:crazyswami-wordpress-dev:audit:10"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Create a plugin foundation

Generate and adapt boilerplate for a custom plugin, REST endpoint, or admin meta box.

Review theme security

Check theme code for missing sanitization, escaping, nonce validation, and capability checks.

Improve site performance

Apply caching, query, asset loading, image, and cron guidance to reduce WordPress overhead.

Try These Prompts

Start a custom post type

Use the wordpress-dev skill to create a custom post type for events. Include labels, supports, rewrite settings, and security-safe naming.

Review a form handler

Use the wordpress-dev security guidance to review this WordPress form handler. Identify missing sanitization, escaping, nonce checks, and capability checks.

Optimize a slow query

Use the wordpress-dev performance guidance to optimize this WP_Query pattern. Suggest caching, indexes, pagination, and safer query arguments.

Design a plugin architecture

Use the wordpress-dev templates and standards to plan a small WordPress plugin with custom post types, taxonomies, meta boxes, REST routes, and asset loading.

Best Practices

Ask for security checks whenever generated code handles user input or permissions.
Adapt placeholder names, text domains, routes, and capabilities before using templates.
Test generated WordPress code in a local site before deploying it.

Avoid

Do not paste boilerplate into production without reviewing permissions and nonces.
Do not hard-code project-specific URLs, paths, or text domains from examples.
Do not treat plugin recommendations as a substitute for current compatibility research.