CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

wordpress-pro

Develops custom WordPress themes and plugins, creates and registers Gutenberg blocks and block patterns, configures WooCommerce stores, implements WordPress REST API endpoints, applies security hardening (nonces, sanitization, escaping, capability checks), and optimizes performance through caching and query tuning. Use when building WordPress themes, writing plugins, customizing Gutenberg blocks, extending WooCommerce, working with ACF, using the WordPress REST API, applying hooks and filters, or improving WordPress performance and security.

74

Quality

93%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

86%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-engineered skill body: executable code patterns for the highest-frequency WordPress security and I/O tasks, a sequenced workflow with a concrete validation command, and a properly structured one-level-deep reference bundle. Remaining gaps are minor: trim the technology name-dump and redundant MUST NOT restatements, and make the validation feedback loop explicit.

Suggestions

Replace the 'Knowledge Reference' section (a bare list of technology names Claude already knows) with a line that adds non-obvious constraints, or delete it.

Add an explicit error-recovery step after validation, e.g. 'If phpcs reports violations: fix, then re-run until clean' — this would complete the feedback loop in Core Workflow.

Trim MUST NOT items that merely negate MUST DO items (e.g. 'Trust user input without sanitization' / 'Output data without escaping') and keep only independently useful prohibitions (core modification, short tags, hardcoded table names).

DimensionReasoningScore

Conciseness

The body is largely lean — code examples carry minimal commentary, and the workflow/constraint lists are prescriptive rather than explanatory. It sits at anchor 4 rather than 5 because a few tokens don't earn their place: the 'Knowledge Reference' section is a bare comma-list of technology names (WordPress 6.4+, PHP 8.1+, WP-CLI, ...) Claude already knows, and several MUST NOT items ('Trust user input without sanitization', 'Output data without escaping') directly restate MUST DO items in negated form. It is well above anchor 3 since there is no concept-explaining padding anywhere.

4 / 5

Actionability

Guidance is fully executable and copy-paste ready: complete PHP snippets for nonce verification, sanitize/escape pairs, enqueueing with wp_localize_script, $wpdb->prepare queries, and capability checks, plus the concrete validation command `phpcs --standard=WordPress` and an explicit output checklist. It matches anchor 5 — the inline patterns cover the most common cases, with remaining detail correctly delegated to reference files.

5 / 5

Workflow Clarity

The six-step Core Workflow is clearly sequenced with named checkpoints: a concrete validation command in step 4 (`phpcs --standard=WordPress` plus manual nonce/capability verification) and a test/audit step 6. It fits anchor 4 rather than 5 because there is no explicit error-recovery feedback loop (what to do when phpcs fails or a check doesn't pass) — checkpoints exist but the 'validate → fix → retry' loop is only implicit.

4 / 5

Progressive Disclosure

The Reference Guide table (Topic | Reference | Load When) clearly signals all five reference files, each of which exists in the bundle (verified) and contains no nested references, so navigation is one level deep. The main file keeps only high-frequency patterns inline and pushes detail out — an exact match for anchor 5's 'clear overview with well-signaled one-level-deep references'.

5 / 5

Total

18

/

20

Passed

Description

100%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

An exemplary description: concrete, comprehensive capability statements paired with an explicit and natural 'Use when' trigger clause. All trigger terms are what a real user would say when needing WordPress work, and the domain boundary is unmistakable.

DimensionReasoningScore

Specificity

The description lists multiple concrete actions with specific techniques: "Develops custom WordPress themes and plugins, creates and registers Gutenberg blocks and block patterns, configures WooCommerce stores, implements WordPress REST API endpoints, applies security hardening (nonces, sanitization, escaping, capability checks), and optimizes performance through caching and query tuning" — comprehensive coverage of the domain with no vague filler. It matches anchor 5 rather than 4 because coverage spans the full domain (themes, plugins, blocks, WooCommerce, REST API, security, performance) with concrete mechanisms named, not just 'several actions with minor gaps'.

5 / 5

Completeness

It explicitly answers both questions: the 'what' is a concrete capability list, and the 'when' is an explicit "Use when building WordPress themes, writing plugins, customizing Gutenberg blocks, extending WooCommerce, working with ACF..." clause with concrete trigger phrases — an exact match for anchor 5. Not 4, because the 'when' is explicit and specific rather than merely present with room to improve.

5 / 5

Trigger Term Quality

Natural trigger phrases users would actually say are comprehensively covered: "building WordPress themes", "writing plugins", "customizing Gutenberg blocks", "extending WooCommerce", "working with ACF", "using the WordPress REST API", "applying hooks and filters". It matches anchor 5's comprehensive natural-term coverage (synonyms included — 'Gutenberg blocks', 'custom blocks', 'ACF'); file extensions are inapplicable to this domain, and no meaningful natural term is missing.

5 / 5

Distinctiveness Conflict Risk

The niche is unambiguous — every trigger term (WordPress, WooCommerce, Gutenberg, ACF, WordPress REST API) is distinctively WordPress and would not fire for a generic PHP/Laravel task, matching anchor 5's 'clear niche with distinct triggers; minimal conflict risk'. The only conceivable overlap is with a generic PHP skill, but the trigger vocabulary makes misfiring unlikely.

5 / 5

Total

20

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

referenced_paths_exist

Referenced path issues: 1 missing

Warning

Total

15

/

16

Passed

Repository

Jeffallan/claude-skills

Path

skills/wordpress-pro/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.