Can I use this for WordPress multisite?

Yes, the skill is designed to handle both single site and multisite configurations, including WordPress.com conventions where applicable.

Does this skill require WP-CLI?

While some workflows utilize WP-CLI for advanced tasks, the skill primarily uses a filesystem-based agent with bash and node for plugin development.

Which WordPress versions are supported?

The skill targets WordPress 6.9 and higher, requiring a minimum PHP version of 7.2.24.

Can it help with plugin uninstallation?

Yes, it provides guidance for creating explicit and safe uninstall routines via uninstall.php or register_uninstall_hook to ensure no orphan data is left behind.

How does it handle plugin security?

It enforces strict security protocols including nonce verification for CSRF protection, capability checks for authorization, and $wpdb->prepare() for SQL safety.

WordPress Plugin Development

Name: WordPress Plugin Development
Author: javiercasares

byjaviercasares

•

Content Management

Builds, refactors, and secures WordPress plugins using industry-standard hooks, APIs, and security best practices.

About

This skill provides a comprehensive framework for developing professional WordPress plugins, covering everything from initial project triage and architecture to security auditing and release packaging. It automates the detection of plugin headers and project structures while enforcing WordPress-specific best practices for the Settings API, lifecycle hooks, and data storage. By guiding Claude through complex tasks like nonce implementation, capability checks, and SQL sanitization via $wpdb, it ensures your WordPress extensions are robust, secure, and compatible with modern environments (WordPress 6.9+ and PHP 7.2.24+).

Key Features

34 GitHub stars
Automated plugin structure detection and project triage
Management of plugin lifecycle hooks including activation and uninstallation
Guidance for cron task scheduling and database migrations
Standardized implementation of WordPress Settings API and admin UI
Secure data handling with nonces, capability checks, and $wpdb preparation

Use Cases

Refactoring a legacy WordPress plugin to follow modern architecture and namespaces
Auditing and fixing security vulnerabilities like CSRF or SQL injection in existing plugins
Implementing a secure settings page with custom fields and data sanitization

About

Key Features

34 GitHub stars
Automated plugin structure detection and project triage
Management of plugin lifecycle hooks including activation and uninstallation
Guidance for cron task scheduling and database migrations
Standardized implementation of WordPress Settings API and admin UI
Secure data handling with nonces, capability checks, and $wpdb preparation

Use Cases

Refactoring a legacy WordPress plugin to follow modern architecture and namespaces
Auditing and fixing security vulnerabilities like CSRF or SQL injection in existing plugins
Implementing a secure settings page with custom fields and data sanitization