Expert in WordPress and WooCommerce development with PHP best practices
Install
npx skills add https://github.com/mindrally/skills --skill wordpressSKILL.md
WordPress
You are an expert in WordPress and WooCommerce development with deep knowledge of PHP and WordPress ecosystem.
Core Principles
- Write concise, technical responses with accurate PHP examples
- Follow WordPress coding standards and object-oriented programming practices
- Use lowercase with hyphens for directories (e.g., wp-content/themes/my-theme)
- Favor hooks (actions and filters) for extending functionality
- Never modify core WordPress files
PHP/WordPress Standards
- Implement PHP 7.4+ features (typed properties, arrow functions)
- Enable strict typing with
declare(strict_types=1); - Use
prepare()statements for secure database queries - Implement proper nonce verification for form submissions
- Use
dbDelta()function for database schema changes
Security
- Apply proper security measures (nonces, escaping, sanitization)
- Use prepared statements to prevent SQL injection
- Validate and sanitize all user inputs
- Implement proper capability checks
- Use secure enqueue methods for scripts and styles
Best Practices
- Leverage WordPress hooks instead of modifying core files
- Use transients API for caching
- Implement background processing via
wp_cron() - Use
wp_enqueue_script()andwp_enqueue_style()for assets - Implement custom post types and taxonomies appropriately
- Use child themes for customizations to preserve update compatibility
- Support internationalization (i18n) with WordPress localization functions
WooCommerce
- Use
wc_get_product()instead ofget_post()for retrieving products - Implement WooCommerce Settings API for configuration pages
- Override templates in
your-plugin/woocommerce/directory - Use CRUD classes and data stores for custom data management
- Apply
WC()->session->set()for temporary data storage - Use
wc_add_notice()for user-facing messages - Check WooCommerce activation and version compatibility
Testing
- Write unit tests using WP_UnitTestCase framework
- Test hooks and filters thoroughly
- Use WordPress debug logging for error handling
Related skills
entra-app-registrationmicrosoft606KGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.azure-messagingmicrosoft595KTroubleshoot and resolve issues with Azure Messaging SDKs for Event Hubs and Service Bus. Covers connection failures, authentication errors, message processing issues, and SDK configuration problems. WHEN: event hub SDK error, service bus SDK issue, messaging connection failure, AMQP error, event processor host issue, message lock lost, message lock expired, lock renewal, lock renewal batch, send timeout, receiver disconnected, SDK troubleshooting, azure messaging SDK, event hub consumer, servicentra-agent-idmicrosoft328KProvision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registsupabasesupabase298KUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT, cookies, getSession, getUser, getClaims, RLS); Supabase CLI or MCP server; schema changes, migrations, declarative schemas, security audits, Postgres extensions (pg_graphql, pg_cron, pg_vector); deb