Skills wp-performance

📦

wp-performance

Content revision r1 Medium Risk ⚙️ External commands🌐 Network access🔑 Env variables

Optimize WordPress Performance

Slow WordPress pages hurt search visibility and conversions. This skill guides Core Web Vitals fixes, caching, media compression, asset tuning, and speed testing.

Supports: Claude Codex Code(CC)

📊 69 Adequate

📊 69 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "wp-performance" from https://skillstore.io/skills/crazyswami-wp-performance.md and its manifest at https://skillstore.io/api/skills/crazyswami-wp-performance/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/crazyswami-wp-performance.md Signed manifest GET /api/skills/crazyswami-wp-performance/manifest Signed lockfile GET /api/skills/crazyswami-wp-performance/lockfile

Test it

Using "wp-performance". A homepage has a 4.8 second LCP, large hero image, and no CDN.

Expected outcome:

Priority plan: compress and convert the hero image, preload the LCP asset, enable page cache, add CDN image delivery, then rerun mobile Lighthouse.

Using "wp-performance". A WooCommerce site has slow admin pages and frequent database timeouts.

Expected outcome:

Suggested review: check object cache readiness, inspect autoloaded options, limit revisions, clean expired transients safely, and validate every database change on staging.

Using "wp-performance". An agency needs a launch checklist for client WordPress sites.

Expected outcome:

Confirm Core Web Vitals targets and mobile Lighthouse baseline.
Verify image compression, lazy loading, caching, CDN, and font settings.
Document rollback steps for database, plugin, and cache changes.

Security Audit

Medium Risk

v8 • 7/5/2026 Open versioned report

Most static alerts are false positives caused by Markdown code fences, documentation links, placeholder API-key text, and local Redis configuration examples. One real risk remains: the guide includes destructive SQL and WP-CLI database maintenance commands without backup, staging, or confirmation safeguards. No prompt injection or credential exfiltration intent was found.

1

Files scanned

535

Lines analyzed

1

Review items

0

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:321-341 SKILL.md:346-354

Destructive Database Maintenance Guidance Lacks Safeguards

The skill gives SQL and WP-CLI examples that delete revisions, delete expired transients, delete orphaned metadata, and optimize tables. It does not require backups, staging validation, dry-run previews, or explicit confirmation before production use.

The cited lines contain direct DELETE, OPTIMIZE, and WP-CLI database modification examples. The surrounding text does not add production safety checks or backup requirements.

Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

Shell command substitution

wp post delete $(wp post list --post_type=revision --format=ids)

This is a runnable WP-CLI deletion command using shell command substitution to feed revision IDs into wp post delete. It is legitimate maintenance, but it can remove production data if executed without backup or confirmation.

Risk Factors

⚙️ External commands (39)

🌐 Network access (13)

SKILL.md:452 SKILL.md:416 SKILL.md:417 SKILL.md:418 SKILL.md:426 SKILL.md:429 SKILL.md:443 SKILL.md:469 SKILL.md:531 SKILL.md:532 SKILL.md:533 SKILL.md:534 SKILL.md:195

🔑 Env variables (4)

SKILL.md:429 SKILL.md:442 SKILL.md:449 SKILL.md:450

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Security Assessment

Copy report link

https://skillstore.io/skills/crazyswami-wp-performance/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/crazyswami-wp-performance/security.svg)](https://skillstore.io/skills/crazyswami-wp-performance?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/crazyswami-wp-performance?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/crazyswami-wp-performance/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/crazyswami-wp-performance.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

CrazySwami. (2026). wp-performance security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/crazyswami-wp-performance/audits/8

BibTeX citation

@techreport{crazyswami-crazyswami-wp-performance-2026,
  author = {CrazySwami},
  title = {wp-performance security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/crazyswami-wp-performance/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "wp-performance security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "CrazySwami"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/crazyswami-wp-performance/audits/8"
identifiers:
  - type: other
    value: "skillstore:crazyswami-wp-performance:audit:8"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

Automattic Recommended

automattic-wp-performance

Skillstore Score 81

Evidence Confidence High

Skillstore usage 10

Updated

2026-08-21

CrazySwami Current

crazyswami-wp-performance

Skillstore Score 69

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

55

Architecture

85

Maintainability

87

Content

71

Community

78

Spec Compliance

What You Can Build

Diagnose Slow Pages

Identify likely LCP, INP, CLS, media, caching, and script issues from site symptoms or audit results.

Plan Performance Fixes

Create an implementation plan for image optimization, caching, deferred assets, fonts, Redis, and CDN headers.

Standardize Speed Reviews

Build a repeatable checklist for launch reviews, maintenance audits, and performance monitoring across client sites.

Try These Prompts

Audit a Slow Page

Review my WordPress page performance symptoms: [URL or notes]. Identify likely Core Web Vitals issues and list fixes in priority order.

Plan Media Optimization

Given this media library summary: [sizes, formats, plugins]. Recommend image and video optimization steps for WordPress, including safe defaults.

Tune Caching and Assets

Review my WordPress stack: [theme, plugins, host, CDN, cache plugin]. Recommend caching, CSS, JavaScript, font, and Redis changes with risks.

Build Speed Monitoring

Design a repeatable speed monitoring process using Lighthouse, PageSpeed Insights, or WebPageTest. Include thresholds, reporting cadence, and rollback triggers.

Best Practices

Run performance tests before and after each change using the same device profile.
Test cache, minification, and script deferral changes on staging before production.
Back up the database before cleanup commands or plugin configuration changes.

Avoid

Do not delete revisions, transients, or metadata on production without backups.
Do not combine or defer all scripts without checking checkout, forms, and animations.
Do not treat one Lighthouse score as proof of sustained real-user performance.

Frequently Asked Questions

Does this skill run speed tests automatically?

No. It provides guidance and examples. Tests require user-approved commands, URLs, and any needed API keys.

Can it help with Core Web Vitals?

Yes. It explains target values and gives practical fixes for LCP, INP, and CLS issues.

Does it recommend WordPress plugins?

Yes. It mentions image optimization, caching, Redis, CDN, and related tools with configuration guidance.

Is the database cleanup guidance safe for production?

Only with backups, staging validation, and careful review. Some examples delete data or optimize live tables.

Can Claude, Codex, or Claude Code use this skill?

Yes. The report lists support for Claude, Codex, and Claude Code compatible workflows.

Does it replace a hosting or CDN expert?

No. It helps structure performance work, but hosting, CDN, and plugin choices still need site-specific testing.

Developer Details

Author

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/CrazySwami/wordpress-dev-skills/tree/main/skills/wp-performance

Ref

02f077c174c5335e2f5d02ca15e77b70d9543e58

Maintenance freshness

7/18/2026

Usage

6 downloads · 285 views

File structure

More from CrazySwami

testing

Build Reliable TypeScript Tests

Testing React applications can be slow when selectors and patterns are inconsistent. This skill guides Playwright, Vitest, and Storybook tests using stable project evidence.

Coding & Development View

code-quality

Improve TypeScript Code Quality

TypeScript and React teams need consistent quality checks before changes ship. This skill gives Claude, Codex, and Claude Code focused review standards and repair guidance.

Coding & Development View

wp-test-analyzer

Analyze WordPress Test Targets

WordPress theme testing often misses forms, templates, navigation, and dynamic content. This skill extracts practical test targets for E2E planning.

Coding & Development View

gsap-animations

Build accessible GSAP animations

Modern web animations can hurt performance and accessibility when they are implemented without clear guardrails. This skill gives Claude practical GSAP patterns, testing steps, and launch checks for polished animation work.

Design & Creative View

wp-orchestrator

Coordinate WordPress Site Builds and Audits

WordPress projects require setup, audits, SEO, testing, and handoff across several tools. This skill coordinates those phases and calls related WordPress skills.

DevOps & Infrastructure View

brand-guide

Create Brand Style Guides for Websites

Teams often lack a clear record of brand colors, type, imagery, and responsive rules. This skill turns site assets and brand inputs into structured guide content for Claude, Codex, and Claude Code workflows.

Design & Creative View

wp-wpcli-and-ops

Manage WordPress Safely with WP-CLI

by Automattic

WordPress command-line operations can damage data or affect the wrong site. This skill provides guarded workflows for inspection, changes, automation, and verification.

DevOps & Infrastructure View

linux-troubleshooting

Diagnose Linux System Issues

by sickn33

Linux incidents often start with broad symptoms and scattered evidence. This skill provides a phased workflow for collecting facts, analyzing resources, checking logs, testing networking, and validating fixes.

DevOps & Infrastructure View

lambda-optimization-advisor

Optimize Rust AWS Lambda Functions

by EmilLindfors

Rust Lambda functions can waste cost through slow I/O, cold starts, and poor memory settings. This skill reviews handlers and deployment settings, then suggests concrete performance and cost improvements.

DevOps & Infrastructure View

code-reviewer

Review Code for Security, Quality, and Performance

by AutumnsGrove

Manual reviews can miss security, quality, and performance issues. This skill applies a structured workflow and optional analysis tools to produce prioritized feedback.

Coding & Development View

vue-best-practices

Improve Vue 3 Code Quality

by vuejs-ai

Vue projects often collect reactivity, component, and performance mistakes over time. This skill gives targeted Vue 3 guidance for safer patterns and clearer code.

Coding & Development View

seo-analysis

Improve SEO Audits and Optimization

by 89jobrien

SEO work often spans technical checks, metadata, performance, and structured data. This skill guides Claude, Codex, and Claude Code through practical SEO audits and recommendations.

Research & Learning View