.claude/skills/wp-wpcli-and-ops/SKILL.md
Use when working with WP-CLI (wp) for WordPress operations: safe search-replace, db export/import, plugin/theme/user/content management, cron, cache flushing, multisite, and scripting/automation with wp-cli.yml.
npx skillsauth add javiercasares/wpvulnerability wp-wpcli-and-opsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
4 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use this skill when the task involves WordPress operational work via WP-CLI, including:
wp search-replace (URL changes, domain migrations, protocol switch)wp db *)wp site *, --url, --network)wp-cli.yml, shell scripts, CI jobs)--path=<wordpress-root> and (multisite) --url=<site-url>WP-CLI commands can be destructive. Before running anything that writes:
Read:
references/safety.mdRun the inspector:
node skills/wp-wpcli-and-ops/scripts/wpcli_inspect.mjs --path=<path> [--url=<url>]If WP-CLI isn’t available, fall back to installing it via the project’s documented tooling (Composer, container, or system package), or ask for the expected execution environment.
search-replace)Follow a safe sequence:
wp db export (backup)wp search-replace --dry-run (review impact)Read:
references/search-replace.mdUse wp plugin * / wp theme * and confirm you’re acting on the intended site (and network) first.
Read:
references/packages-and-updates.mdInspect cron state and run individual events for debugging rather than “run everything blindly”.
Read:
references/cron-and-cache.mdMultisite changes can affect many sites. Always decide whether you’re operating:
--url=), or--network / iterating sites)Read:
references/multisite.mdFor repeatable ops, prefer:
wp-cli.yml for defaults (path/url, PHP memory limits)Read:
references/automation.mdwpcli_inspect after changes that could affect targeting or config.--path, wrong container, or missing wp-config.php--url or wrong URLSee:
references/debugging.mdtools
Use when working with WP-CLI (wp) for WordPress operations: safe search-replace, db export/import, plugin/theme/user/content management, cron, cache flushing, multisite, and scripting/automation with wp-cli.yml.
tools
Use when you need a deterministic inspection of a WordPress repository (plugin/theme/block theme/WP core/Gutenberg/full site) including tooling/tests/version hints, and a structured JSON report to guide workflows and guardrails.
tools
Use when developing WordPress plugins: architecture and hooks, activation/deactivation/uninstall, admin UI and Settings API, data storage, cron/tasks, security (nonces/capabilities/sanitization/escaping), and release packaging.
tools
Use for WordPress Playground workflows: fast disposable WP instances in the browser or locally via @wp-playground/cli (server, run-blueprint, build-snapshot), auto-mounting plugins/themes, switching WP/PHP versions, blueprints, and debugging (Xdebug).