Can I use this for WordPress multisite?

Yes, the skill is designed to handle both single site and multisite configurations, including WordPress.com conventions where applicable.

Does this skill require WP-CLI?

While some workflows utilize WP-CLI for advanced tasks, the skill primarily uses a filesystem-based agent with bash and node for plugin development.

Which WordPress versions are supported?

The skill targets WordPress 6.9 and higher, requiring a minimum PHP version of 7.2.24.

Can it help with plugin uninstallation?

Yes, it provides guidance for creating explicit and safe uninstall routines via uninstall.php or register_uninstall_hook to ensure no orphan data is left behind.

How does it handle plugin security?

It enforces strict security protocols including nonce verification for CSRF protection, capability checks for authorization, and $wpdb->prepare() for SQL safety.

WordPress Plugin Development

Name: WordPress Plugin Development
Author: javiercasares

byjaviercasares

•

Content Management

Builds, refactors, and secures WordPress plugins using industry-standard hooks, APIs, and security best practices.

This skill provides a comprehensive framework for developing professional WordPress plugins, covering everything from initial project triage and architecture to security auditing and release packaging. It automates the detection of plugin headers and project structures while enforcing WordPress-specific best practices for the Settings API, lifecycle hooks, and data storage. By guiding Claude through complex tasks like nonce implementation, capability checks, and SQL sanitization via $wpdb, it ensures your WordPress extensions are robust, secure, and compatible with modern environments (WordPress 6.9+ and PHP 7.2.24+).

Key Features

0134 GitHub stars

02Automated plugin structure detection and project triage

03Management of plugin lifecycle hooks including activation and uninstallation

04Guidance for cron task scheduling and database migrations

05Standardized implementation of WordPress Settings API and admin UI

06Secure data handling with nonces, capability checks, and $wpdb preparation

Use Cases

01Refactoring a legacy WordPress plugin to follow modern architecture and namespaces

02Auditing and fixing security vulnerabilities like CSRF or SQL injection in existing plugins

03Implementing a secure settings page with custom fields and data sanitization

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add javiercasares/wpvulnerability wp-plugin-development

For use in Claude.ai and ChatGPT

Download Skill