📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills wordpress
📦
wordpress
v1.0.0 Content revision r1 Medium Risk ⚙️ External commands
Build WordPress Projects With Guided Workflows
WordPress projects span themes, plugins, performance, security, and deployment. This skill organizes each phase into practical actions and prompts.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "wordpress" from https://skillstore.io/skills/sickn33-wordpress.md and its manifest at https://skillstore.io/api/skills/sickn33-wordpress/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "wordpress". Plan a custom WordPress theme for a service business.
Expected outcome:
A phased build plan covering setup, theme structure, responsive templates, performance checks, security checks, and launch readiness.
Using "wordpress". Create a workflow for a WooCommerce subscription store.
Expected outcome:
A release checklist for products, payment setup, checkout customization, subscription logic, testing, deployment, and post-launch monitoring.
Using "wordpress". Audit a WordPress site before production launch.
Expected outcome:
A quality gate review covering updates, authentication, headers, file permissions, backups, performance metrics, browser tests, and accessibility.
Security Audit
Medium Riskv4 • 7/7/2026 Open versioned report
The 58 static external-command findings are false positives caused by markdown inline code and fenced code blocks, not executable backtick use. No prompt injection or malicious automation was found. One medium semantic issue remains because the REST API example uses an unrestricted permission callback.
1
Files scanned
320
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Unrestricted WordPress REST Endpoint Example
The custom REST API example registers a route with permission_callback set to __return_true. This allows anonymous access and can teach unsafe access control if copied for non-public data.
The example directly uses __return_true on a REST route. The route is GET and may be public by design, so the finding is medium severity rather than high.
Risk Factors
⚙️ External commands (58)
SKILL.md:32 SKILL.md:33 SKILL.md:43-45 SKILL.md:45-50 SKILL.md:50-51 SKILL.md:51-52 SKILL.md:52-53 SKILL.md:53-65 SKILL.md:65-85 SKILL.md:85-88 SKILL.md:88-90 SKILL.md:90-92 SKILL.md:92-94 SKILL.md:94-99 SKILL.md:99-100 SKILL.md:100-101 SKILL.md:101-113 SKILL.md:113-130 SKILL.md:130-133 SKILL.md:133-135 SKILL.md:135-140 SKILL.md:140-141 SKILL.md:141-142 SKILL.md:142-155 SKILL.md:155-157 SKILL.md:157-159 SKILL.md:159-161 SKILL.md:161-166 SKILL.md:166-167 SKILL.md:167-187 SKILL.md:187-189 SKILL.md:189-194 SKILL.md:194-195 SKILL.md:195-196 SKILL.md:196-220 SKILL.md:220-222 SKILL.md:222-224 SKILL.md:224-226 SKILL.md:226-231 SKILL.md:231-232 SKILL.md:232-233 SKILL.md:233-245 SKILL.md:245-247 SKILL.md:247-252 SKILL.md:252-253 SKILL.md:253-254 SKILL.md:254-267 SKILL.md:267-269 SKILL.md:269-274 SKILL.md:274-282 SKILL.md:282-285 SKILL.md:285-293 SKILL.md:293-296 SKILL.md:296-302 SKILL.md:302-316 SKILL.md:316-317 SKILL.md:317-318 SKILL.md:318-319
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-wordpress/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-wordpress?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-wordpress?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-wordpress/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-wordpress.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). wordpress security audit report (audit version 4) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/sickn33-wordpress/audits/4BibTeX citation
@techreport{sickn33-sickn33-wordpress-2026,
author = {sickn33},
title = {wordpress security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-wordpress/audits/4},
note = {Author version 1.0.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "wordpress security audit report (audit version 4)"
version: "1.0.0"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-wordpress/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-wordpress:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
100
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Launch a WordPress Build
Plan setup, theme structure, plugins, quality gates, and deployment tasks for a new site.
Plan a Custom Plugin
Break plugin work into architecture, hooks, admin screens, REST endpoints, and tests.
Prepare a WooCommerce Release
Coordinate payment integration, checkout changes, subscriptions, performance, and security checks.
Try These Prompts
Plan a New Site
Use the WordPress workflow to plan a new local WordPress project. Include setup, theme choice, required plugins, and first checkpoints.
Design a Theme Workflow
Use the WordPress workflow to outline a custom theme build. Include template files, component work, styling, accessibility, and testing steps.
Review Performance and Security
Use the WordPress workflow to create a performance and security review plan. Include caching, updates, headers, authentication, and logging checks.
Coordinate a Full Launch
Use the WordPress workflow to build a launch plan for a WooCommerce site. Include development, payments, testing, deployment, rollback, and monitoring.
Best Practices
- Verify each generated WordPress change in a local or staging environment first.
- Review examples for nonce checks, capability checks, sanitization, and escaping.
- Use the phase checklists before moving from development to deployment.
Avoid
- Treating copy-paste prompts as production-ready implementation without review.
- Publishing sample API endpoints without explicit access-control decisions.
- Skipping WordPress core, theme, and plugin updates before security testing.
Frequently Asked Questions
Does this skill build WordPress sites automatically?
No. It provides a structured workflow, prompts, examples, and checklists for guided development.
Can I use it with Claude, Codex, and Claude Code?
Yes. The report lists support for Claude, Codex, and Claude Code.
Does it include WooCommerce guidance?
Yes. It covers WooCommerce setup, checkout customization, payments, subscriptions, and release checks.
Are the PHP snippets production ready?
No. They are examples and require security, validation, and access-control review.
What project phases does it cover?
It covers setup, theme development, plugin development, WooCommerce, performance, security, testing, and deployment.
Does it replace WordPress documentation?
No. Use it as workflow guidance alongside official WordPress and WooCommerce documentation.
Developer Details
Author
sickn33License
MIT
Author version
v1.0.0
Skillstore revision
r1
Ref
f93e9bb0daca99badb6a7e574b97737155d57cb3
Maintenance freshness
7/18/2026
Usage
7 downloads · 164 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-architect
81Review Architecture Workflows and Project Paths
Architecture reviews need a consistent starting point and clear project boundaries. This skill provides workspace-scoped tool templates, command examples, and generic design references.
Coding & Development View
📦
senior-fullstack
81Review Fullstack Project Foundations
Fullstack project setup can require many tools and checks. This skill provides basic local wrappers, common commands, and general engineering guidance.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
wp-block-themes
82Build WordPress Block Themes
by Automattic
Block theme changes often fail because settings, templates, and editor overrides interact. This skill guides theme.json, templates, patterns, style variations, and troubleshooting.
Coding & Development View
📦
wp-plugin-development
81Build Secure WordPress Plugins
by Automattic
WordPress plugin changes can introduce lifecycle, data, and security defects. This skill provides a structured workflow for implementation, review, testing, and release preparation.
Coding & Development View
📦
woocommerce-code-review
79Review WooCommerce code against project standards
by woocommerce
WooCommerce changes can violate project-specific architecture, testing, documentation, and copy rules. This skill structures reviews around those standards and returns cited, actionable fixes.
Coding & Development View
📦
woocommerce-backend-dev
78Build WooCommerce Backend PHP with Project Standards
by woocommerce
WooCommerce backend changes can fail review when they ignore project conventions. This skill guides compliant classes, hooks, data operations, annotations, and tests.
Coding & Development View
📦
agent-development
85Build Claude Code Agents
by Dami-Randle
Designing reliable Claude Code agents is hard without structure. This skill provides templates, validation rules, and examples for agent prompts, triggers, tools, and metadata.
Coding & Development View
📦
analyzing-component-quality
82Evaluate Claude Code Component Quality
by C0ntr0lledCha0s
Claude Code components can be technically valid yet unclear, over-permissioned, or difficult to invoke. This skill scores five quality dimensions and recommends specific improvements.
Coding & Development View