CtrlK
BlogDocsLog inGet started
Tessl Logo

wordpress-pro

Develops custom WordPress themes and plugins, creates and registers Gutenberg blocks and block patterns, configures WooCommerce stores, implements WordPress REST API endpoints, applies security hardening (nonces, sanitization, escaping, capability checks), and optimizes performance through caching and query tuning. Use when building WordPress themes, writing plugins, customizing Gutenberg blocks, extending WooCommerce, working with ACF, using the WordPress REST API, applying hooks and filters, or improving WordPress performance and security.

68

Quality

82%

Does it follow best practices?

Impact

No eval scenarios have been run

SecuritybySnyk

Passed

No known issues

SKILL.md
Quality
Evals
Security

Quality

Content

64%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a solid WordPress skill with excellent actionability — the code examples are complete, security-focused, and cover the most critical patterns. The main weaknesses are the lack of explicit feedback loops in the workflow (especially important for security validation), and the missing bundle files that the reference table points to. The content could be slightly more concise by trimming the keyword dump and tightening the constraints to only non-obvious items.

Suggestions

Add explicit feedback loops to the core workflow, e.g., 'If phpcs reports violations, fix them and re-run until clean' and 'If nonce verification fails during testing, check form output and verify action names match'.

Create the referenced bundle files (references/theme-development.md, etc.) or remove the reference table if they don't exist, as broken references reduce trust in the skill.

Remove the 'Knowledge Reference' keyword list at the bottom — it adds no actionable value and wastes tokens.

Trim the MUST NOT DO list to non-obvious items; entries like 'Trust user input without sanitization' and 'Ignore SQL injection vectors' are things Claude already knows.

DimensionReasoningScore

Conciseness

The skill is mostly efficient with good code examples, but includes some unnecessary content like the 'Knowledge Reference' keyword dump at the bottom and the 'Output Templates' section which is somewhat vague. The constraints section, while useful, has some items Claude would already know (e.g., 'don't trust user input without sanitization').

2 / 3

Actionability

The skill provides fully executable, copy-paste-ready PHP code examples for all critical patterns: nonce verification, sanitization/escaping, script enqueuing, prepared queries, and capability checks. Each example is complete and specific with proper WordPress function usage.

3 / 3

Workflow Clarity

The core workflow has a clear 6-step sequence with a validation step (phpcs), but lacks explicit feedback loops — there's no 'if phpcs fails, fix and re-run' instruction. For a skill involving security-critical operations (sanitization, nonce handling, database queries), the absence of explicit error recovery/re-validation loops is a gap.

2 / 3

Progressive Disclosure

The reference table with 5 topic-specific files is well-structured and clearly signaled with 'Load When' guidance, which is excellent design. However, no bundle files were provided, meaning all referenced files (references/theme-development.md, etc.) are missing, making the progressive disclosure structure aspirational rather than functional. The inline content is also somewhat lengthy for an overview file.

2 / 3

Total

9

/

12

Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This is an excellent skill description that thoroughly covers the WordPress development domain with specific, concrete actions and comprehensive trigger terms. It follows the recommended pattern with a clear 'Use when...' clause, uses third person voice consistently, and includes both high-level capabilities and specific technical details (nonces, sanitization, escaping). The description is well-structured and would allow Claude to confidently select this skill when WordPress-related tasks arise.

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions: developing themes/plugins, creating Gutenberg blocks and block patterns, configuring WooCommerce, implementing REST API endpoints, applying security hardening (with specific techniques like nonces, sanitization, escaping, capability checks), and optimizing performance through caching and query tuning.

3 / 3

Completeness

Clearly answers both 'what' (develops themes, plugins, Gutenberg blocks, WooCommerce configuration, REST API endpoints, security hardening, performance optimization) and 'when' with an explicit 'Use when...' clause listing specific trigger scenarios like building themes, writing plugins, customizing Gutenberg blocks, extending WooCommerce, etc.

3 / 3

Trigger Term Quality

Excellent coverage of natural terms users would say: WordPress themes, plugins, Gutenberg blocks, WooCommerce, ACF, WordPress REST API, hooks and filters, nonces, sanitization, escaping, performance, security. These are all terms a developer would naturally use when seeking WordPress help.

3 / 3

Distinctiveness Conflict Risk

Highly distinctive with WordPress-specific terminology throughout. The combination of WordPress, Gutenberg, WooCommerce, ACF, hooks and filters, and WordPress REST API creates a clear niche that is unlikely to conflict with general web development or other CMS skills.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation11 / 11 Passed

Validation for skill structure

No warnings or errors.

Repository
Jeffallan/claude-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.