Make Claude a senior WordPress engineer — security, performance, Gutenberg blocks, theme and plugin discipline.
claude-wordpress-skills is a professional skills pack for WordPress work: security auditing (nonces, capabilities, escaping), performance optimization (caching, query tuning), Gutenberg block development (modern JS + block.json), and theme/plugin best practices (i18n, accessibility, WP Coding Standards). Load it once and Claude stops writing 2015-era WordPress code.
Audit a plugin for common WordPress security issues
👤 Plugin maintainers, site owners⏱ ~60 minadvanced
언제 쓸까: Before shipping a plugin or inheriting one.
흐름
Scope the audit
Audit this plugin for: nonce usage on every form, capability checks on every action, output escaping, SQL prep.✓ 복사됨
→ Per-category findings with file:line
Fix the highest-risk ones
Apply the top 3 fixes — nonces on the admin form, esc_html on the dashboard widget, $wpdb->prepare on the custom query.✓ 복사됨
→ Diffs to the plugin files
Regression test
List what to manually test to confirm the fixes don't break anything.✓ 복사됨
→ Short manual test checklist
결과: A more secure plugin with documented fixes.
함정
False positives on nonces where a REST permission callback is already in place — Provide context: REST routes with permission callbacks don't need form nonces