Skip to main content
skill CX Codex

wp-abilities-audit — Claude Code skill: audit and install

This skill reviews a WordPress plugin’s REST surface and writes a planning document for proposed Abilities API registrations.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓
npx skills add WordPress/agent-skills --skill wp-abilities-audit -a claude-code
Open on GitHub

What wp-abilities-audit does

wp-abilities-audit examines a WordPress plugin checkout and turns its REST surface into a Markdown audit. The document records controllers, routes, HTTP methods, callbacks, permission checks, and a YAML model for proposed Abilities API registrations. Candidates are grouped by user intent, while internal transport routes stay in the inventory.

Each proposed ability gets an intent, backing path, permission details, return type, effort rating, annotations, risks, side effects, and seed-data requirements. The workflow needs a plugin checkout, a successful wp-project-triage run, an auditor identity, and an explicit output path. The audit cannot start without a successful wp-project-triage run. Use a filesystem-based environment with bash and node; WP-CLI can help with some workflows but is not required.

What it helps with

  • review a WordPress plugin’s REST surface
  • map controllers, routes, and callback details
  • trace read and write capability gates
  • group REST behavior into Abilities API proposals
  • record rollout gaps, risks, and deferred candidates

Example prompts for the agent

  • Audit this plugin’s REST surface and write the result to audit.md.
  • Run wp-project-triage, then prepare Abilities API registration proposals for the plugin checkout.
  • Build the controller inventory, trace permissions, and record the seed data needed to test each proposed ability.

How to install wp-abilities-audit

1Skills CLI (Vercel)

npx skills add WordPress/agent-skills --skill wp-abilities-audit -a claude-code

2Manually: put the files in place

~/.claude/skills/wp-abilities-audit/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/wp-abilities-audit/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about wp-abilities-audit

How do I install wp-abilities-audit in Claude Code?

Run npx skills add WordPress/agent-skills --skill wp-abilities-audit -a claude-code, then use ~/.claude/skills/wp-abilities-audit/SKILL.md.

What does wp-abilities-audit do?

It inspects a WordPress plugin’s REST controllers and creates a Markdown audit with a YAML schema, route inventory, and proposed Abilities API registrations.

What must be ready before the audit runs?

Provide a plugin checkout, a successful wp-project-triage result, an auditor identity, and an output path. The plugin also needs at least one REST controller.

Similar skills

All skills for Agent setup: memory, context, orchestration →

From the same set19

wp-abilities-api A skill for WordPress Abilities API work: registering abilities and categories in PHP, exposing them over REST, reading them in JS. Useful when a client can't see an ability. CX Codex +1 4,300installs wp-interactivity-api Guides AI agents through WordPress Interactivity API implementation and debugging. Helps configure directives, connect script modules, and eliminate hydration mismatches. CX Codex +1 4,200installs wpds Feeds WordPress Design System docs to your agent through an MCP server, so UI work lands on real components and tokens instead of guesses. CX Codex +1 4,000installs blueprint Create and inspect JSON Blueprints for WordPress Playground with this skill. Use it to configure an environment as a Blueprint file, rather than just launch or share one. CX Codex +1 3,700installs wp-plugin-directory-guidelines Audits WordPress plugins against 18 WordPress.org Directory guidelines, verifying GPL license compatibility and freemium rules before submission. CX Codex +1 3,600installs wp-abilities-verify Verifies WordPress plugin Abilities API registrations, flags hidden database writes in readonly callbacks, and validates schemas. CX Codex +1 2,600installs wp-patterns Creates and updates WordPress block patterns, then checks registration and markup. Useful for templates, starter pages, and Query Loop layouts. CX Codex +1 2,200installs wp-env Configures and manages Docker-based WordPress environments using @wordpress/env. Useful when you need a real MySQL database, WP-CLI, or PHPUnit testing. CX Codex +1 679installs

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor