wordpress avatar

Wp Plugin Development

Handles the full WordPress plugin development cycle: structure, activation hooks, Settings API, security hardening, and release prep. It triages your repo, detects plugin headers, then walks you through architecture decisions, lifecycle hooks (with guardrails around fragile activation patterns), admin UI via Settings API, and mandatory security checks like nonces, capabilities, sanitization, and prepared statements. Targets WordPress 6.9+ and assumes a filesystem agent with bash, node, and optionally WP-CLI. The security-first approach is the standout here. Every workflow ends with verification that settings save correctly, uninstall is clean, and the plugin activates without warnings.

install copies · 90 days. Times the install command was copied on this site in the last 90 days, bots filtered.
10
skills.sh installs
8.6K
GitHub stars
2.3K
last updated
Aug 21, 2026

Install

$ npx -y skills add wordpress/agent-skills --skill wp-plugin-development --agent claude-code

Installs into .claude/skills of the current project.

Files

WP Plugin Development

When to use

Use this skill for plugin work such as:

  • creating or refactoring plugin structure (bootstrap, includes, namespaces/classes)
  • adding hooks/actions/filters
  • activation/deactivation/uninstall behavior and migrations
  • adding settings pages / options / admin UI (Settings API)
  • security fixes (nonces, capabilities, sanitization/escaping, SQL safety)
  • packaging a release (build artifacts, readme, assets)

Inputs required

  • Repo root + target plugin(s) (path to plugin main file if known).
  • Where this plugin runs: single site vs multisite; WP.com conventions if applicable.
  • Target WordPress + PHP versions (affects available APIs and placeholder support in $wpdb->prepare()).

Procedure

0) Triage and locate plugin entrypoints

  1. Run triage:
    • node skills/wp-project-triage/scripts/detect_wp_project.mjs
  2. Detect plugin headers (deterministic scan):
    • node skills/wp-plugin-development/scripts/detect_plugins.mjs

If this is a full site repo, pick the specific plugin under wp-content/plugins/ or mu-plugins/ before changing code.

1) Follow a predictable architecture

Guidelines:

Sponsors

Details

Repository
github.com/wordpress/agent-skills
Categories
Frontend Development, Backend & APIs, Security, Code Review & Quality, AI & Agent Building, Release Management, Automation & Workflows, PHP & Laravel

More from wordpress/agent-skills

All 17
1flutter avatarflutter-handling-concurrencyflutter/skillsOffload CPU-intensive tasks to background isolates while keeping Flutter UIs responsive.8.6Kskills.sh installs
2cypress-io avatarcypress-explaincypress-io/ai-toolkitExplains Cypress tests (E2E and component tests), and answers questions about Cypress use and behavior. Use when the user asks to explain how a test works, expl8.5Kskills.sh installs
3github avatarwinapp-cligithub/awesome-copilotWindows App Development CLI (winapp) for building, packaging, signing, debugging, and UI-automating Windows applications. Use when asked to initialize Windows a8.4Kskills.sh installs
4google avatargoogle-analytics-data-api-basicsgoogle/skillsManages Google Analytics reporting data, enables the Analytics Data API via the Cloud CLI, and creates reports using the Google Analytics Data API (v1beta). Use8.4Kskills.sh installs
5jeffallan avatararchitecture-designerjeffallan/claude-skillsUse when designing new high-level system architecture, reviewing existing designs, or making architectural decisions. Invoke to create architecture diagrams, wr8.2Kskills.sh installs
6bencium avatarbencium-innovative-ux-designerbencium/bencium-marketplaceCreate distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applicat8.2Kskills.sh installs