skills/wp-wpcli-and-ops/SKILL.md
Use when working with WP-CLI (wp) for WordPress operations: safe search-replace, db export/import, plugin/theme/user/content management, cron, cache flushing, multisite, and scripting/automation with wp-cli.yml.
npx skillsauth add WordPress/agent-skills wp-wpcli-and-opsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
4 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use this skill when the task involves WordPress operational work via WP-CLI, including:
wp search-replace (URL changes, domain migrations, protocol switch)wp db *)wp site *, --url, --network)wp-cli.yml, shell scripts, CI jobs)--path=<wordpress-root> and (multisite) --url=<site-url>WP-CLI commands can be destructive. Before running anything that writes:
Read:
references/safety.mdRun the inspector:
node skills/wp-wpcli-and-ops/scripts/wpcli_inspect.mjs --path=<path> [--url=<url>]If WP-CLI isn’t available, fall back to installing it via the project’s documented tooling (Composer, container, or system package), or ask for the expected execution environment.
search-replace)Follow a safe sequence:
wp db export (backup)wp search-replace --dry-run (review impact)Read:
references/search-replace.mdUse wp plugin * / wp theme * and confirm you’re acting on the intended site (and network) first.
Read:
references/packages-and-updates.mdInspect cron state and run individual events for debugging rather than “run everything blindly”.
Read:
references/cron-and-cache.mdMultisite changes can affect many sites. Always decide whether you’re operating:
--url=), or--network / iterating sites)Read:
references/multisite.mdFor repeatable ops, prefer:
wp-cli.yml for defaults (path/url, PHP memory limits)Read:
references/automation.mdwpcli_inspect after changes that could affect targeting or config.--path, wrong container, or missing wp-config.php--url or wrong URLSee:
references/debugging.mdtools
Verify a WordPress plugin's Abilities API registrations: enumerate abilities, check that callback behavior matches each annotation's claim (the adversarial readonly-but-writes detection), validate permissions and schemas, and validate audit documents produced by wp-abilities-audit.
tools
Audit a WordPress plugin's REST surface and produce a standardized audit document proposing Abilities API registrations. Produces a markdown doc with a YAML schema and prose sections that humans and agents can both consume when planning a registration rollout. Works on any WP plugin.
tools
Use when working with the WordPress Abilities API (wp_register_ability, wp_register_ability_category, /wp-json/wp-abilities/v1/*, @wordpress/abilities) including defining abilities, categories, meta, REST exposure, and permissions checks for clients.
tools
Use when reviewing WordPress plugins for GPL compliance, checking license headers or compatibility, evaluating upsell/freemium/trialware patterns, validating plugin naming or trademark rules, checking plugin slugs, understanding why a plugin was rejected from WordPress.org, or answering any question about the 18 WordPress.org Plugin Directory guidelines — even if the user doesn't mention 'guidelines' explicitly.