Build safer WordPress plugins and themes.
Guides agents in securing WordPress features with input checks, authorization, safe output, and prepared database queries.
When to use it
Use when processing form or AJAX input, displaying untrusted content, or implementing permissions.
It changes how the agent implements WordPress features by applying a security checklist to input handling, output, database access, and authorization.
What you provide
The main instructions target WordPress 6.7+.
The main instructions target PHP 8.3+.
This skill
wpscan
Installs the WPScan security scanner
sucuri-scanner
Installs and activates Sucuri Security