CtrlK
BlogDocsLog inGet started
Tessl Logo

wordpress-plugin-development

WordPress plugin development workflow covering plugin architecture, hooks, admin interfaces, REST API, security best practices, and WordPress 7.0 features: Real-Time Collaboration, AI Connectors, Abilities API, DataViews, and PHP-only blocks.

48

Quality

52%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/wordpress-plugin-development/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

38%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This skill covers a broad scope of WordPress plugin development including WP 7.0 features, but suffers from being simultaneously too verbose in its generic guidance and too monolithic in structure. The concrete code examples for WP 7.0 features (AI Connector, Abilities API, PHP-only blocks) are the strongest parts, but they're buried in a long document padded with generic action lists and unnecessary 'Copy-Paste Prompts' that add little value. The skill would benefit significantly from trimming generic content Claude already knows and splitting detailed examples into referenced bundle files.

Suggestions

Remove the generic action lists in each phase (e.g., 'Implement nonce verification', 'Add capability checks') and replace with concrete code snippets or remove entirely since Claude knows these patterns.

Extract the lengthy code examples (AI Connector, Abilities API, PHP-only blocks) into separate bundle files and reference them from the main SKILL.md to improve progressive disclosure.

Remove or consolidate the 'Copy-Paste Prompts' sections - they add minimal value and consume tokens across every phase.

Add explicit validation/verification steps between workflow phases, especially after database operations (Phase 5) and security implementation (Phase 7), such as specific test commands or validation scripts to run.

DimensionReasoningScore

Conciseness

The skill is significantly verbose with many sections that explain concepts Claude already knows (what hooks are, what CRUD operations are, what nonce verification is). The 'When to Use This Workflow' section is unnecessary padding. Many phases contain generic action lists ('Create custom tables', 'Implement CRUD operations') that add no value. The 'Copy-Paste Prompts' sections that just say 'Use @skill-name to do X' are low-value filler repeated across every phase.

2 / 5

Actionability

The skill provides several concrete code examples (AI Connector, Abilities API, PHP-only blocks, DataViews, RTC meta registration) that are reasonably executable. However, many phases contain only vague action lists ('Implement nonce verification', 'Add capability checks', 'Sanitize all inputs') without concrete code. The mix of executable examples and abstract bullet points lands it at the midpoint.

3 / 5

Workflow Clarity

The 9-phase workflow provides a clear sequence for plugin development, and the checklists at the end serve as validation checkpoints. However, there are no explicit validation steps between phases, no error recovery guidance, and no feedback loops. For a workflow involving database operations and security-sensitive actions, the absence of validation steps within the workflow phases is a notable gap.

3 / 5

Progressive Disclosure

The content is a monolithic wall of text at ~350+ lines with no bundle files to offload detailed content. The lengthy code examples (Abilities API registration alone is ~50 lines) should be in separate reference files. References to other skills (@app-builder, @backend-dev-guidelines, etc.) exist but there are no actual supporting files. The structure would benefit greatly from splitting code examples and phase details into separate files.

2 / 5

Total

10

/

20

Passed

Description

66%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description provides good topical coverage of WordPress plugin development with specific feature mentions, particularly the WordPress 7.0 features which add distinctiveness. However, it reads more like a topic list than an actionable skill description—it lacks action verbs describing what the skill does and critically omits a 'Use when...' clause to guide skill selection.

Suggestions

Add a 'Use when...' clause with trigger phrases like 'Use when the user asks to build, debug, or extend a WordPress plugin, or mentions WP hooks, admin pages, or plugin architecture.'

Rewrite the opening with action verbs: 'Guides creation and development of WordPress plugins, including scaffolding plugin architecture, implementing hooks, building admin interfaces...' instead of just listing topics.

Include common synonyms and abbreviations users might use: 'WP plugin', 'WordPress extension', 'action/filter hooks', 'wp-admin panel'.

DimensionReasoningScore

Specificity

Lists several specific areas: plugin architecture, hooks, admin interfaces, REST API, security best practices, and multiple WordPress 7.0 features. However, these are more topic areas than concrete actions (no verbs like 'create', 'build', 'configure'), which prevents a score of 5.

4 / 5

Completeness

Clearly answers 'what' by listing the topics and capabilities covered, but there is no explicit 'when' clause (no 'Use when...' or equivalent trigger guidance). Per rubric guidelines, missing 'Use when...' caps completeness at 3.

3 / 5

Trigger Term Quality

Includes strong natural keywords like 'WordPress', 'plugin', 'hooks', 'REST API', 'admin interfaces', and specific WordPress 7.0 feature names. Missing some common user phrases like 'WP plugin', 'custom plugin', 'shortcode', 'wp-admin', or 'enqueue scripts' that users might naturally say.

4 / 5

Distinctiveness Conflict Risk

The focus on WordPress plugin development specifically, combined with WordPress 7.0 features, makes it fairly distinct. Minor overlap risk with general WordPress development or PHP development skills, but the plugin-specific and version-specific details reduce conflict.

4 / 5

Total

15

/

20

Passed

Validation

90%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation10 / 11 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

10

/

11

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.