General skillSecurity and privacy
wp-plugin-security-checklist
Check WordPress plugins for authorization, sanitization, and output-escaping flaws
Check WordPress plugins for authorization, sanitization, and output-escaping flaws
wp-plugin-security-checklist guides security checks for WordPress plugins that accept input or render stored content. It covers nonce and capability enforcement for REST, admin, AJAX, and public endpoints, recursive schema-based sanitization, CSS and JavaScript allowlists, safe metadata exposure, prepared statements, file writes, and context-correct escaping at output. A compact grep checklist helps apply the rules while building or reviewing custom plugins.
Resource types
Use cases
Platforms
Audit suspension risks in a Claude Code working environment.
Check whether a specific CVE actually applies to your environment.
Protocols & integrations
Audience
Public GitHub facts last synced Jul 10, 2026.
Store and inject development secrets through 1Password from Claude Code.
Audit a deployed public app for production gaps missed during coding.