.codex/skills/wp-playground/SKILL.md
Use for WordPress Playground workflows: fast disposable WP instances in the browser or locally via @wp-playground/cli (server, run-blueprint, build-snapshot), auto-mounting plugins/themes, switching WP/PHP versions, blueprints, and debugging (Xdebug).
npx skillsauth add javiercasares/wpvulnerability wp-playgroundInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
4 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
npm/npx available.--auto-mount or explicit mount mapping).node -v) before running CLI.cd <plugin-or-theme-root>
npx @wp-playground/cli@latest server --auto-mount
--wp=<version> / --php=<version> as needed.--skip-wordpress-setup and mount the whole tree.--mount=/host/path:/vfs/path (repeatable) when auto-mount is insufficient (multi-plugin, mu-plugins, custom content).--mount-before-install for bootstrapping installer flows.references/cli-commands.mdnpx @wp-playground/cli@latest run-blueprint --blueprint=<file-or-url>
--blueprint-may-read-adjacent-files when required.references/blueprints.md for structure and common flags.npx @wp-playground/cli@latest build-snapshot --blueprint=<file> --outfile=./site.zip
--xdebug (or --enable-xdebug depending on CLI release) to expose an IDE key, then connect VS Code/PhpStorm to the host/port shown in CLI output.--auto-mount for plugin/theme debugging.references/debugging.md--wp= to pin WP (e.g., 6.9.0) and --php= to test compatibility.https://playground.wordpress.net/#<base64-or-json-blueprint>https://playground.wordpress.net/?blueprint-url=<public-url-or-zip>--verbosity=debug to confirm steps executed.wp plugin list inside Playground shell via browser terminal if exposed) or UI click-path.--verbosity=debug.--blueprint-may-read-adjacent-files.--port=<free-port>.--experimental-multi-worker if enabled; or enable it to improve throughput on CPU-bound runs.tools
Use when working with WP-CLI (wp) for WordPress operations: safe search-replace, db export/import, plugin/theme/user/content management, cron, cache flushing, multisite, and scripting/automation with wp-cli.yml.
tools
Use when you need a deterministic inspection of a WordPress repository (plugin/theme/block theme/WP core/Gutenberg/full site) including tooling/tests/version hints, and a structured JSON report to guide workflows and guardrails.
tools
Use when developing WordPress plugins: architecture and hooks, activation/deactivation/uninstall, admin UI and Settings API, data storage, cron/tasks, security (nonces/capabilities/sanitization/escaping), and release packaging.
tools
Use when configuring, running, or fixing PHPStan static analysis in WordPress projects (plugins/themes/sites): phpstan.neon setup, baselines, WordPress-specific typing, and handling third-party plugin classes.