Skills woocommerce-code-review
📦

woocommerce-code-review

Content revision r2 Safe ⚡ Contains scripts⚙️ External commands📁 Filesystem access

Review WooCommerce code against project standards

WooCommerce changes can violate project-specific architecture, testing, documentation, and copy rules. This skill structures reviews around those standards and returns cited, actionable fixes.

Supports: Claude Codex Code(CC)
🥉 79 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "woocommerce-code-review" from https://skillstore.io/skills/woocommerce-woocommerce-code-review.md and its manifest at https://skillstore.io/api/skills/woocommerce-woocommerce-code-review/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/woocommerce-woocommerce-code-review.md Signed manifest GET /api/skills/woocommerce-woocommerce-code-review/manifest Signed lockfile GET /api/skills/woocommerce-woocommerce-code-review/lockfile

Test it

Using "woocommerce-code-review". A PHP change creates a managed service directly and adds a public method without required documentation.

Expected outcome:

  • Dependency injection: Resolve the managed class through the container. Cite the affected file and dependency injection standard.
  • Documentation: Add the required annotation and concise docblock. Cite the affected method and code entity standard.

Using "woocommerce-code-review". A settings screen labels its primary action as Save Changes.

Expected outcome:

Sentence case: Change the label to Save changes. Cite the interface text location and sentence case standard.

Using "woocommerce-code-review". A TypeScript module imports its own package barrel, which re-exports that module.

Expected outcome:

Barrel self-import: Replace the package barrel import with the direct module path to prevent a circular dependency.

Security Audit

Safe
v9 • 7/24/2026 Open versioned report

All 27 static findings are false positives caused by Markdown formatting, relative documentation links, and prose examples. The skill provides review guidance without executable scripts, shell commands, runtime path handling, or prompt injection.

1
Files scanned
82
Lines analyzed
0
Review items
0
False positives ignored

Risk Factors

⚡ Contains scripts (1)
SKILL.md:47
⚙️ External commands (12)
SKILL.md:14 SKILL.md:19 SKILL.md:20 SKILL.md:29 SKILL.md:39 SKILL.md:40 SKILL.md:41 SKILL.md:47 SKILL.md:51 SKILL.md:70-75 SKILL.md:75-79 SKILL.md:79
📁 Filesystem access (14)
SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:24 SKILL.md:25 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:35 SKILL.md:39 SKILL.md:40 SKILL.md:41 SKILL.md:47 SKILL.md:53
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/woocommerce-woocommerce-code-review/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/woocommerce-woocommerce-code-review/security.svg)](https://skillstore.io/skills/woocommerce-woocommerce-code-review?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/woocommerce-woocommerce-code-review?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/woocommerce-woocommerce-code-review/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/woocommerce-woocommerce-code-review.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

woocommerce. (2026). woocommerce-code-review security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/woocommerce-woocommerce-code-review/audits/9

BibTeX citation

@techreport{woocommerce-woocommerce-woocommerce-code-review-2026, author = {woocommerce}, title = {woocommerce-code-review security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/woocommerce-woocommerce-code-review/audits/9}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "woocommerce-code-review security audit report (audit version 9)" version: "unspecified" type: report authors: - name: "woocommerce" date-released: "2026-07-24" url: "https://skillstore.io/skills/woocommerce-woocommerce-code-review/audits/9" identifiers: - type: other value: "skillstore:woocommerce-woocommerce-code-review:audit:9" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
70
Community
91
Spec Compliance

What You Can Build

Check a local change

Review a WooCommerce patch before submission and identify project-specific convention violations.

Prepare pull request feedback

Generate structured comments with locations, standards, and concise correction guidance.

Audit cross-stack changes

Check PHP, JavaScript, TypeScript, tests, and interface copy within one review.

Try These Prompts

Quick standards check 
Review this WooCommerce change for the listed standards. Report each issue with its location, standard, and suggested fix.
Review PHP changes 
Review these PHP changes for architecture, dependency injection, naming, documentation, data integrity, and unit test conventions.
Review a full pull request 
Review this WooCommerce pull request across PHP, JavaScript, TypeScript, tests, and interface copy. Group related findings and cite relevant standards.
Assess architecture risks 
Perform a detailed review of this WooCommerce change. Prioritize dependency injection violations, barrel self-imports, destructive state changes, and missing test coverage.

Best Practices

  • Provide the complete diff and enough surrounding code to verify each finding.
  • Load the referenced companion skills before reviewing detailed WooCommerce standards.
  • Validate each reported issue against the current repository context before changing code.

Avoid

  • Do not request a review without file paths or line context.
  • Do not treat the listed checks as a complete security or performance audit.
  • Do not apply suggested fixes without checking intentional public APIs and documented exceptions.

Frequently Asked Questions

What code does this skill review?
It reviews WooCommerce PHP, JavaScript, TypeScript, tests, documentation, and interface copy against listed project conventions.
Does it run automated tools?
No. The skill provides review instructions and does not run tests, linters, analyzers, or repository commands.
Does it replace a security review?
No. It includes a data integrity check, but it is not a complete security assessment.
Why are companion skills required?
The companion skills contain the detailed WooCommerce standards, exceptions, and examples referenced by this review process.
What should a finding include?
Each finding should identify the problem, file location, relevant standard, and a concise correction.
Can it review interface text?
Yes. It flags title case in interface text and directs reviewers to the sentence case guidance.

Developer Details

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Repository

https://github.com/woocommerce/woocommerce/tree/trunk/.ai/skills/woocommerce-code-review

Ref

88a8e9a07f4c54ab105c1c41b6267c287146b07b

Maintenance freshness

7/26/2026

Usage

8 downloads · 224 views

File structure

📄 SKILL.md