By iwritec0de
WordPress development plugin — enforces WPCS, blocks insecure code patterns, and provides WP/WooCommerce development guidance
Find and clean up unused PHP code, Composer dependencies, imports, and dead code in WordPress projects
Build a Gutenberg page layout by discovering available blocks and generating valid block markup
Quick reference lookup for WordPress and WooCommerce hooks
Run a static performance audit on the current WordPress plugin or theme
Run live performance diagnostics on a connected WordPress site via the MCP adapter
Use this agent for Gutenberg custom block development. Trigger when the user asks to "create a block", "build a Gutenberg block", "add a custom block", "register a block", "create block variation", "add block pattern", "set up block plugin", "scaffold a block", "create dynamic block", "create static block", "add block controls", "add InspectorControls", "add block toolbar", or mentions "block.json", "@wordpress/scripts", "@wordpress/block-editor", "wp-block", "useBlockProps", "RichText", "InnerBlocks", "block attributes", "block supports", "block transforms", "block styles", "block variations", "Gutenberg development".
Use this agent to perform static performance analysis on WordPress plugins and themes. Trigger when the user asks to "audit plugin performance", "find slow queries in my plugin", "check for N+1 queries", "scan for performance issues", "optimize my WordPress plugin", or mentions "performance audit", "query optimization", "N+1", "slow plugin". Scans PHP files for query anti-patterns, caching gaps, hook weight, autoload issues, and N+1 patterns.
Use this agent to perform comprehensive WordPress security audits. Trigger when the user asks to "audit WordPress security", "scan for PHP vulnerabilities", "check for unescaped output", "find SQL injection", "review WordPress plugin security", "check nonce usage", or mentions "WordPress security", "WPCS", "sanitization", "escaping". Scans PHP files for unescaped output, unsanitized input, missing nonces, raw SQL, missing capability checks, and WooCommerce-specific issues.
Use this agent for WordPress theme development tasks. Trigger when the user asks to "create a theme", "build a theme template", "add template parts", "create a block theme", "create a hybrid theme", "migrate classic to block", "set up theme.json", "add theme support", "create template hierarchy", "build a child theme", "customize theme styles", "add theme patterns", or mentions "FSE theme", "block theme", "classic theme", "hybrid theme", "theme.json", "template parts", "template hierarchy", "wp_enqueue_style", "functions.php theme setup", "theme customizer", or "theme development".
This skill should be used when the user asks to "build a Gutenberg layout", "create a page layout", "design a WordPress page", "generate block markup", "build a landing page in Gutenberg", "create a block pattern layout", "design a section layout", "generate Gutenberg HTML", or mentions "gutenberg layout", "block layout", "page builder", "block pattern", "WordPress page design", "section layout", "full site editing layout". Provides Gutenberg layout generation by discovering available blocks on a WordPress site (via WordPress MCP), then producing valid block markup.
This skill should be used when the user asks to "find unused PHP code", "clean up dead code", "find unused Composer dependencies", "find unused imports", "remove dead PHP code", "run composer unused", "check for missing dependencies", "detect unused classes", "detect unused methods", "clean up use statements", "audit PHP dependencies", or mentions "composer-unused", "composer-require-checker", "Psalm unused code", "dead code detection", "unused imports", "unused dependencies", "PHP cleanup", "WordPress dead code". Provides expert guidance on detecting and removing unused code, dependencies, imports, and dead exports in PHP/WordPress projects using composer-unused, composer-require-checker, Psalm, and PHP-CS-Fixer.
This skill should be used before claiming any work is complete, before committing, before creating PRs, or before reporting task status. Enforces fresh verification evidence for all completion claims in WordPress/PHP projects. Provides the verification gate methodology: run commands, read output, then report.
This skill should be used when the user asks to "customize WooCommerce checkout", "build a payment gateway", "create a shipping method", "work with WooCommerce orders", "add custom product data", or mentions "woocommerce", "WC_Product", "WC_Order", "HPOS", "cart hooks", "checkout hooks", "payment gateway", "shipping method", "woocommerce REST API". Provides WooCommerce development patterns including CRUD objects, hooks, custom product types, checkout customization, payment gateways, shipping methods, and HPOS compatibility.
This skill should be used when the user asks to "create a custom database table", "write a WP_Query", "use $wpdb", "run a meta query", "migrate a database schema", "optimize WordPress queries", "use dbDelta", "add an index", or mentions "custom table", "$wpdb", "WP_Query", "meta_query", "tax_query", "date_query", "dbDelta", "get_results", "prepare", "SAVEQUERIES", "Query Monitor", "object cache", "wp_cache", "database migration", "schema versioning". Provides WordPress database development expertise covering $wpdb, custom tables, schema migrations, WP_Query, meta/taxonomy/date queries, caching layers, and query debugging.
Modifies files
Hook triggers on file write and edit operations
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
WordPress development plugin for Claude Code — enforces WPCS, blocks insecure code patterns, provides WP/WooCommerce development guidance, and connects to live WordPress sites via MCP.
Add to your project's .claude/settings.json:
{
"permissions": {
"plugins": {
"wp-dev": true
}
}
}
/wp-scaffold plugin my-plugin # 1. Generate plugin boilerplate (WPCS + security)
# Hooks auto-enforce standards on every edit
↓
Write plugin code # 2. pre-edit: secret scanning
# post-edit: WPCS + ESLint + Prettier
↓
/wp-test # 3. Run PHPUnit / Jest tests
/wp-security-audit # 4. Full security scan (12 categories)
/wp-perf-audit # 5. Static performance analysis
↓
Session end # 6. on-stop: full WPCS + tests + PHPDoc check
/wp-scaffold theme my-theme # 1. Generate theme boilerplate
/wp-gutenberg-layout landing page # 2. Visual page prototyping with blocks
# (discovers available blocks via MCP)
↓
Write templates # 3. Hooks enforce standards
/wp-test # 4. Run tests
/wp-scaffold block my-block # 1. block.json + edit.js + save.js + render.php
/wp-gutenberg-layout # 2. Discover core blocks, compose layouts
/wp-test js # 3. Run Jest / wp-scripts tests
/wp-scaffold woo-product-tab # 1. Product data tab boilerplate
# (woocommerce skill: CRUD, hooks, HPOS)
/wp-security-audit # 2. Security scan (includes HPOS checks)
/wp-perf-audit # 3. Performance scan (WooCommerce-aware)
Automatic:
pre-edit hook → secret scanning (JWT, PEM, credentials)
post-edit hook → WPCS checks on changed files
Manual:
/wp-security-audit # Full 12-category audit via agent
# CRITICAL → WARNING → INFO severity
# Fix by severity (CRITICAL first)
/wp-perf-audit # Static analysis (no site needed)
# Unbounded queries, N+1, autoload bloat
↓
/wp-perf # Live diagnostics (requires MCP connection)
# Real query counts, slowest queries, hook timing
↓
Fix findings # wordpress-performance + wordpress-database skills
The wp-debugging skill activates automatically for WordPress errors:
1. Enable WP_DEBUG, WP_DEBUG_LOG, SCRIPT_DEBUG
2. Read debug.log for error details
3. Systematic 4-phase process:
Root cause → Pattern analysis → Hypothesis → Fix
4. Tools: error_log(), WP-CLI, Query Monitor, Xdebug
5. 3-strike rule: if 3 fixes fail, question the architecture
/wp-hooks-ref save_post # Look up specific hook
/wp-hooks-ref woocommerce_checkout # Search by prefix
/wp-hooks-ref auth # Search by topic
| Skill | Purpose |
|---|---|
wordpress-engineer | Full WP development: themes, plugins, security, performance, hooks, WP-CLI |
wordpress-patterns | CPT, taxonomies, meta boxes, REST API, Settings API, cron, transients, AJAX |
wordpress-standards | Naming conventions, file organization, coding style, PHP 7.4+, PHPDoc |
wordpress-security | Output escaping, input sanitization, nonces, capabilities, SQL safety |
wp-hooks | Hook documentation, scanning, parameter extraction |
wordpress-database | $wpdb, custom tables, schema versioning, WP_Query, meta queries, caching |
wordpress-performance | Query optimization, caching strategies, hook profiling, autoload management |
wordpress-i18n | Translation functions, text domains, JS translations, RTL support |
| Skill | Purpose |
|---|---|
woocommerce | CRUD objects, hooks, product data, checkout, payment gateways, shipping, HPOS |
| Skill | Purpose |
|---|---|
gutenberg-layout | Block discovery, layout generation, responsive design, block composition |
npx claudepluginhub iwritec0de/claude-plugin-marketplace --plugin wp-devFull-stack Next.js development: App Router patterns, TypeScript engineering, Supabase/PostgreSQL/MySQL database integration, Prisma ORM, API design and scaffolding, authentication and authorization, Framer Motion animations, quality gate enforcement, and security scanning
Dependency guardian — intercepts package installs to enforce latest versions and block vulnerable packages. Supports npm, pip, and composer. Hard-blocks when offline or scans unavailable.
Harness-native ECC operator layer - 67 agents, 271 skills, 92 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
Feature development with code-architect/explorer/reviewer agents, CLAUDE.md audit and session learnings, and Agent Skills creation with eval benchmarking from Anthropic.
Production-grade engineering skills for AI coding agents — covering the full software development lifecycle from spec to ship.
Comprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.
Access thousands of AI prompts and skills directly in your AI coding assistant. Search prompts, discover skills, save your own, and improve prompts with AI.
Complete developer toolkit for Claude Code