wordpress/agent-skills▌

Register, validate, and debug WordPress REST API endpoints with schema enforcement and permission controls. \n \n Covers route registration via register_rest_route() and WP_REST_Controller subclasses, custom field exposure through register_rest_field and meta registration, and CPT/taxonomy REST exposure via show_in_rest \n Enforces schema validation, argument sanitization, and permission callbacks; supports cookie + nonce, application passwords, and custom auth plugins \n Includes triage workflo

WordPress block theme development: theme.json, templates, patterns, and Site Editor troubleshooting. \n \n Covers theme.json editing (presets, settings, per-block styles), templates and template parts, patterns, and style variations across WordPress 6.9+ \n Includes triage scripts to detect theme roots and block theme structure, plus guided procedures for creating new themes or converting classic themes \n Provides debugging workflows for style hierarchy issues, user customization overrides, and

WordPress operations and automation via WP-CLI with safe search-replace, database management, and multisite support. \n \n Covers search-replace for domain migrations, database export/import, plugin/theme/user management, cron inspection, and cache flushing \n Includes built-in guardrails: environment confirmation, dry-run validation, and backup workflows before destructive operations \n Supports multisite operations with site-specific ( --url ) and network-wide ( --network ) targeting \n Enable

Classify WordPress codebases and route to the correct workflow for plugins, themes, blocks, and core checkouts. \n \n Runs automated project triage to identify repo type (plugin, theme, block theme, Gutenberg blocks, WP core) and available tooling \n Outputs classification results and decision tree routing to domain-specific skills based on user intent and project kind \n Requires repo root access and bash/Node filesystem operations; some workflows need WP-CLI \n Targets WordPress 6.9+ with PHP

Backend-only WordPress performance profiling and optimization using WP-CLI, Query Monitor, and targeted diagnostics. \n \n Detects and measures performance bottlenecks via WP-CLI doctor/profile commands, Server-Timing headers, and Query Monitor REST API integration without requiring browser access \n Covers five optimization categories: database query reduction, autoloaded options cleanup, object cache configuration, cron task optimization, and remote HTTP call management \n Includes safe verifi

WordPress block development for Gutenberg: metadata, registration, rendering, and build workflows. \n \n Covers block creation, block.json configuration, static vs. dynamic rendering, and server-side PHP registration with register_block_type_from_metadata() \n Enforces apiVersion: 3 for WordPress 6.9+ compatibility, including iframe editor support and style isolation \n Handles attribute serialization, deprecations/migrations to prevent \"Invalid block\" errors, and inner blocks composition \n I

Complete WordPress plugin development workflow from architecture through security and release packaging. \n \n Covers plugin structure, hooks/actions/filters, activation/deactivation/uninstall lifecycle, and Settings API for admin UI and options management \n Includes mandatory security baseline: input validation/sanitization, nonces, capability checks, and parameterized SQL queries via $wpdb->prepare() \n Supports data storage patterns, cron task setup with idempotency, and schema migrations wi

WordPress Abilities API registration, REST exposure, and client-side consumption for WordPress 6.9+. \n \n Register abilities and categories in PHP using wp_register_ability() and wp_register_ability_category() with stable IDs, labels, and metadata \n Expose abilities to clients via the /wp-json/wp-abilities/v1/ REST endpoints by setting meta.show_in_rest: true \n Consume abilities in JavaScript using the @wordpress/abilities package for client-side access and permission checks \n Requires WordP

PHPStan configuration, error fixing, and baseline management for WordPress projects. \n \n Handles WordPress-specific typing patterns: REST endpoints with WP_REST_Request , hook callbacks with accurate @param types, database results, and Action Scheduler job arguments \n Manages third-party plugin/theme class resolution via stubs ( php-stubs/woocommerce-stubs , php-stubs/acf-pro-stubs ) and targeted ignore patterns \n Provides deterministic PHPStan discovery, configuration validation, baseline g

Fast, disposable WordPress instances in the browser or locally via CLI, with auto-mounting, version switching, and Xdebug debugging. \n \n Spin up ephemeral WordPress sites in WebAssembly with SQLite; supports WordPress 6.9+ and PHP 7.2.24+, with quick version switching for compatibility testing. \n CLI commands include server (auto-mount plugins/themes), run-blueprint (scripted setup), and build-snapshot (shareable ZIP exports) via Node.js 20.18+. \n Auto-detect and mount local plugin or theme

Use this skill when the user mentions:

This skill works best with the WPDS MCP server installed. The MCP provides access to WordPress Design System documentation and resources, such as components and DS token lists.

Deterministic WordPress repository inspection with structured JSON output for workflow guidance. \n \n Detects project kind (plugin, theme, block theme, WP core, Gutenberg, full site) and outputs a schema-validated JSON report including tooling, tests, and version hints \n Runs via Node.js detector script at repo root; outputs project.kind , signals , and tooling fields to guide downstream workflows \n Identifies PHP/Node tooling presence and test frameworks to inform which commands and conventi