wordpress-plugin-development
WordPress plugin development workflow covering plugin architecture, hooks, admin interfaces, REST API, and security best practices.
Best use case
wordpress-plugin-development is best used when you need a repeatable AI agent workflow instead of a one-off prompt.
WordPress plugin development workflow covering plugin architecture, hooks, admin interfaces, REST API, and security best practices.
Teams using wordpress-plugin-development should expect a more consistent output, faster repeated execution, less prompt rewriting.
When to use this skill
- You want a reusable workflow that can be run more than once with consistent structure.
When not to use this skill
- You only need a quick one-off answer and do not need a reusable workflow.
- You cannot install or maintain the underlying files, dependencies, or repository context.
Installation
Claude Code / Cursor / Codex
Manual Installation
- Download SKILL.md from GitHub
- Place it in
.claude/skills/wordpress-plugin-development/SKILL.mdinside your project - Restart your AI agent — it will auto-discover the skill
How wordpress-plugin-development Compares
| Feature / Agent | wordpress-plugin-development | Standard Approach |
|---|---|---|
| Platform Support | Not specified | Limited / Varies |
| Context Awareness | High | Baseline |
| Installation Complexity | Unknown | N/A |
Frequently Asked Questions
What does this skill do?
WordPress plugin development workflow covering plugin architecture, hooks, admin interfaces, REST API, and security best practices.
Where can I find the source code?
You can find the source code on GitHub using the link provided at the top of the page.
SKILL.md Source
# WordPress Plugin Development Workflow ## Overview Specialized workflow for creating WordPress plugins with proper architecture, hooks system, admin interfaces, REST API endpoints, and security practices. ## When to Use This Workflow Use this workflow when: - Creating custom WordPress plugins - Extending WordPress functionality - Building admin interfaces - Adding REST API endpoints - Integrating third-party services ## Workflow Phases ### Phase 1: Plugin Setup #### Skills to Invoke - `app-builder` - Project scaffolding - `backend-dev-guidelines` - Backend patterns #### Actions 1. Create plugin directory structure 2. Set up main plugin file with header 3. Implement activation/deactivation hooks 4. Set up autoloading 5. Configure text domain #### Copy-Paste Prompts ``` Use @app-builder to scaffold a new WordPress plugin ``` ### Phase 2: Plugin Architecture #### Skills to Invoke - `backend-dev-guidelines` - Architecture patterns #### Actions 1. Design plugin class structure 2. Implement singleton pattern 3. Create loader class 4. Set up dependency injection 5. Configure plugin lifecycle #### Copy-Paste Prompts ``` Use @backend-dev-guidelines to design plugin architecture ``` ### Phase 3: Hooks Implementation #### Skills to Invoke - `wordpress-penetration-testing` - WordPress patterns #### Actions 1. Register action hooks 2. Create filter hooks 3. Implement callback functions 4. Set up hook priorities 5. Add conditional hooks #### Copy-Paste Prompts ``` Use @wordpress-penetration-testing to understand WordPress hooks ``` ### Phase 4: Admin Interface #### Skills to Invoke - `frontend-developer` - Admin UI #### Actions 1. Create admin menu 2. Build settings pages 3. Implement options registration 4. Add settings sections/fields 5. Create admin notices #### Copy-Paste Prompts ``` Use @frontend-developer to create WordPress admin interface ``` ### Phase 5: Database Operations #### Skills to Invoke - `database-design` - Database design - `postgresql` - Database patterns #### Actions 1. Create custom tables 2. Implement CRUD operations 3. Add data validation 4. Set up data sanitization 5. Create data upgrade routines #### Copy-Paste Prompts ``` Use @database-design to design plugin database schema ``` ### Phase 6: REST API #### Skills to Invoke - `api-design-principles` - API design - `api-patterns` - API patterns #### Actions 1. Register REST routes 2. Create endpoint callbacks 3. Implement permission callbacks 4. Add request validation 5. Document API endpoints #### Copy-Paste Prompts ``` Use @api-design-principles to create WordPress REST API endpoints ``` ### Phase 7: Security #### Skills to Invoke - `wordpress-penetration-testing` - WordPress security - `security-scanning-security-sast` - Security scanning #### Actions 1. Implement nonce verification 2. Add capability checks 3. Sanitize all inputs 4. Escape all outputs 5. Secure database queries #### Copy-Paste Prompts ``` Use @wordpress-penetration-testing to audit plugin security ``` ### Phase 8: Testing #### Skills to Invoke - `test-automator` - Test automation - `php-pro` - PHP testing #### Actions 1. Set up PHPUnit 2. Create unit tests 3. Write integration tests 4. Test with WordPress test suite 5. Configure CI #### Copy-Paste Prompts ``` Use @test-automator to set up plugin testing ``` ## Plugin Structure ``` plugin-name/ ├── plugin-name.php ├── includes/ │ ├── class-plugin.php │ ├── class-loader.php │ ├── class-activator.php │ └── class-deactivator.php ├── admin/ │ ├── class-plugin-admin.php │ ├── css/ │ └── js/ ├── public/ │ ├── class-plugin-public.php │ ├── css/ │ └── js/ ├── languages/ └── vendor/ ``` ## Quality Gates - [ ] Plugin activates without errors - [ ] All hooks working - [ ] Admin interface functional - [ ] Security measures implemented - [ ] Tests passing - [ ] Documentation complete ## Related Workflow Bundles - `wordpress` - WordPress development - `wordpress-theme-development` - Theme development - `wordpress-woocommerce` - WooCommerce
Related Skills
managing-autonomous-development
Enables Claude to manage Sugar's autonomous development workflows. It allows Claude to create tasks, view the status of the system, review pending tasks, and start autonomous execution mode. Use this skill when the user asks to create a new development task using `/sugar-task`, check the system status with `/sugar-status`, review pending tasks via `/sugar-review`, or initiate autonomous development using `/sugar-run`. It provides a comprehensive interface for interacting with the Sugar autonomous development system.
plugin-validator
Validate automatically validates AI assistant code plugin structure, schemas, and compliance when user mentions validate plugin, check plugin, or plugin errors. runs comprehensive validation specific to AI assistant-code-plugins repository standards. Use when validating configurations or code. Trigger with phrases like 'validate', 'check', or 'verify'.
plugin-creator
Create automatically creates new AI assistant code plugins with proper structure, validation, and marketplace integration when user mentions creating a plugin, new plugin, or plugin from template. specific to AI assistant-code-plugins repository workflow. Use when generating or creating new content. Trigger with phrases like 'generate', 'create', or 'scaffold'.
plugin-auditor
Audit automatically audits AI assistant code plugins for security vulnerabilities, best practices, AI assistant.md compliance, and quality standards when user mentions audit plugin, security review, or best practices check. specific to AI assistant-code-plugins repositor... Use when assessing security or running audits. Trigger with phrases like 'security scan', 'audit', or 'vulnerability'.
overnight-development
Automates software development overnight using git hooks to enforce test-driven Use when appropriate context detected. Trigger with relevant phrases based on skill purpose.
fastify-plugin-creator
Fastify Plugin Creator - Auto-activating skill for Backend Development. Triggers on: fastify plugin creator, fastify plugin creator Part of the Backend Development skill category.
typespec-create-api-plugin
Generate a TypeSpec API plugin with REST operations, authentication, and Adaptive Cards for Microsoft 365 Copilot
wp-plugin-security
Security guidelines for WordPress plugin development: sanitization, validation, escaping, nonces, capabilities, SQL injection prevention, XSS protection, and CSRF mitigation. Based on official WordPress Developer Resources.
wp-plugin-performance
Performance guidelines for WordPress plugin development: database optimization, object caching, conditional asset loading, efficient hooks, HTTP requests, WP-Cron, AJAX/REST optimization, and common anti-patterns. Based on official WordPress Developer Resources and WP VIP documentation.
ros2-development
Comprehensive best practices, design patterns, and common pitfalls for ROS2 (Robot Operating System 2) development. Use this skill when building ROS2 nodes, packages, launch files, components, or debugging ROS2 systems. Trigger whenever the user mentions ROS2, colcon, rclpy, rclcpp, DDS, QoS, lifecycle nodes, managed nodes, ROS2 launch, ROS2 parameters, ROS2 actions, nav2, MoveIt2, micro-ROS, or any ROS2-era robotics middleware. Also trigger for ROS2 workspace setup, DDS tuning, intra-process communication, ROS2 security, or deploying ROS2 in production. Also trigger for colcon build issues, ament_cmake, ament_python, CMakeLists.txt for ROS2, package.xml dependencies, rosdep, workspace overlays, custom message generation, or ROS2 build troubleshooting. Covers Humble, Iron, Jazzy, and Rolling distributions.
ros1-development
Best practices, design patterns, and common pitfalls for ROS1 (Robot Operating System 1) development. Use this skill when building ROS1 nodes, packages, launch files, or debugging ROS1 systems. Trigger whenever the user mentions ROS1, catkin, rospy, roscpp, roslaunch, roscore, rostopic, tf, actionlib, message types, services, or any ROS1-era robotics middleware. Also trigger for migrating ROS1 code to ROS2, maintaining legacy ROS1 systems, or building ROS1-ROS2 bridges. Covers catkin workspaces, nodelets, dynamic reconfigure, pluginlib, and the full ROS1 ecosystem.
docker-ros2-development
Best practices for Docker-based ROS2 development including multi-stage Dockerfiles, docker-compose for multi-container robotic systems, DDS discovery across containers, GPU passthrough for perception, and dev-vs-deploy container patterns. Use this skill when containerizing ROS2 workspaces, setting up docker-compose for robot software stacks, debugging DDS communication between containers, configuring NVIDIA Container Toolkit for GPU workloads, forwarding X11/Wayland for rviz2 and GUI tools, or managing USB device passthrough for cameras and serial devices. Trigger whenever the user mentions Docker with ROS2, docker-compose for robots, Dockerfile for colcon workspaces, container networking for DDS, GPU containers for perception, devcontainer for ROS2, multi-stage builds for ROS2, or deploying ROS2 in containers. Also trigger for CI/CD with Docker-based ROS2 builds, CycloneDDS or FastDDS configuration in containers, shared memory in Docker, or X11 forwarding for rviz2. Covers Humble, Iron, Jazzy, and Rolling distributions across Ubuntu 22.04 and 24.04 base images.