| name | wordpress |
| description | Complete WordPress development workflow covering theme development, plugin creation, WooCommerce integration, performance optimization, and security hardening. Includes WordPress 7.0 features: Real-Time Collaboration, AI Connectors, Abilities API, DataViews, and PHP-only blocks. |
| category | workflow-bundle |
| risk | safe |
| source | personal |
| date_added | 2026-02-27 |
WordPress Development Workflow Bundle
Overview
Comprehensive WordPress development workflow covering theme development, plugin creation, WooCommerce integration, performance optimization, and security. This bundle orchestrates skills for building production-ready WordPress sites and applications.
WordPress 7.0 Features (Backward Compatible)
WordPress 7.0 (April 9, 2026) introduces significant features while maintaining backward compatibility:
Real-Time Collaboration (RTC)
- Multiple users can edit simultaneously using Yjs CRDT
- HTTP polling provider (configurable via
WP_COLLABORATION_MAX_USERS)
- Custom transport via
sync.providers filter
- Backward Compatibility: Falls back to post locking when legacy meta boxes detected
AI Connectors API
- Provider-agnostic AI interface in core (
wp_ai_client_prompt())
- Settings > Connectors for centralized API credential management
- Official providers: OpenAI, Anthropic Claude, Google Gemini
- Backward Compatibility: Works with WordPress 6.9+ via plugin
Abilities API (Stable in 7.0)
- Standardized capability declaration system
- REST API endpoints:
/wp-json/abilities/v1/manifest
- MCP adapter for AI agent integration
- Backward Compatibility: Can be used as Composer package in 6.x
DataViews & DataForm
- Replaces WP_List_Table on Posts, Pages, Media screens
- New layouts: table, grid, list, activity
- Client-side validation (pattern, minLength, maxLength, min, max)
- Backward Compatibility: Plugins using old hooks still work
PHP-Only Block Registration
- Register blocks entirely via PHP without JavaScript
- Auto-generated Inspector controls
- Backward Compatibility: Existing JS blocks continue to work
Interactivity API Updates
watch() replaces effect from @preact/signals
- State navigation changes
- Backward Compatibility: Old syntax deprecated but functional
Admin Refresh
- New default color scheme
- View transitions between admin screens
- Backward Compatibility: CSS-level changes, no breaking changes
Pattern Editing
- ContentOnly mode defaults for unsynced patterns
disableContentOnlyForUnsyncedPatterns setting
- Backward Compatibility: Existing patterns work
When to Use This Workflow
Use this workflow when:
- Building new WordPress websites
- Creating custom themes
- Developing WordPress plugins
- Setting up WooCommerce stores
- Optimizing WordPress performance
- Hardening WordPress security
- Implementing WordPress 7.0 features (RTC, AI, DataViews)
Workflow Phases
Phase 1: WordPress Setup
Skills to Invoke
app-builder - Project scaffolding
environment-setup-guide - Development environment
Actions
- Set up local development environment (LocalWP, Docker, or Valet)
- Install WordPress (recommend 7.0+ for new projects)
- Configure development database
- Set up version control
- Configure wp-config.php for development
WordPress 7.0 Configuration
define('WP_COLLABORATION_MAX_USERS', 5);
Copy-Paste Prompts
Use @app-builder to scaffold a new WordPress project with modern tooling
Phase 2: Theme Development
Skills to Invoke
frontend-developer - Component development
frontend-design - UI implementation
tailwind-patterns - Styling
web-performance-optimization - Performance
Actions
- Design theme architecture
- Create theme files (style.css, functions.php, index.php)
- Implement template hierarchy
- Create custom page templates
- Add custom post types and taxonomies
- Implement theme customization options
- Add responsive design
- Test with WordPress 7.0 admin refresh
WordPress 7.0 Theme Considerations
- Block API v3 now reference model
- Pseudo-element support in theme.json
- Global Styles custom CSS honors block-defined selectors
- View transitions for admin navigation
Theme Structure
theme-name/
āāā style.css
āāā functions.php
āāā index.php
āāā header.php
āāā footer.php
āāā sidebar.php
āāā single.php
āāā page.php
āāā archive.php
āāā search.php
āāā 404.php
āāā template-parts/
āāā inc/
āāā assets/
ā āāā css/
ā āāā js/
ā āāā images/
āāā languages/
Copy-Paste Prompts
Use @frontend-developer to create a custom WordPress theme with React components
Use @tailwind-patterns to style WordPress theme with modern CSS
Phase 3: Plugin Development
Skills to Invoke
backend-dev-guidelines - Backend standards
api-design-principles - API design
auth-implementation-patterns - Authentication
Actions
- Design plugin architecture
- Create plugin boilerplate
- Implement hooks (actions and filters)
- Create admin interfaces
- Add custom database tables
- Implement REST API endpoints
- Add settings and options pages
WordPress 7.0 Plugin Considerations
- RTC Compatibility: Register post meta with
show_in_rest => true
- AI Integration: Use
wp_ai_client_prompt() for AI features
- DataViews: Consider new admin UI patterns
- Meta Boxes: Migrate to block-based UIs for collaboration support
RTC-Compatible Post Meta Registration
register_post_meta('post', 'custom_field', [
'type' => 'string',
'single' => true,
'show_in_rest' => true, // Required for RTC
'sanitize_callback' => 'sanitize_text_field',
]);
AI Connector Example
$response = wp_ai_client_prompt('Summarize this content.')
->generate_text();
$response = wp_ai_client_prompt('Summarize this content.')
->using_temperature(0.2)
->generate_text();
$response = wp_ai_client_prompt('Summarize this content.')
->using_model_preference('gpt-4', 'claude-3-opus', 'gemini-2-pro')
->generate_text();
$schema = [
'type' => 'object',
'properties' => [
'summary' => ['type' => 'string'],
'keywords' => ['type' => 'array', 'items' => ['type' => 'string']]
],
'required' => ['summary']
];
$response = wp_ai_client_prompt('Analyze this content and return JSON.')
->using_system_instruction('You are a content analyzer.')
->as_json_response($schema)
->generate_text();
Plugin Structure
plugin-name/
āāā plugin-name.php
āāā includes/
ā āāā class-plugin-activator.php
ā āāā class-plugin-deactivator.php
ā āāā class-plugin-loader.php
ā āāā class-plugin.php
āāā admin/
ā āāā class-plugin-admin.php
ā āāā css/
ā āāā js/
āāā public/
ā āāā class-plugin-public.php
ā āāā css/
ā āāā js/
āāā languages/
Copy-Paste Prompts
Use @backend-dev-guidelines to create a WordPress plugin with proper architecture
Phase 4: WooCommerce Integration
Skills to Invoke
payment-integration - Payment processing
stripe-integration - Stripe payments
billing-automation - Billing workflows
Actions
- Install and configure WooCommerce
- Create custom product types
- Customize checkout flow
- Integrate payment gateways
- Set up shipping methods
- Create custom order statuses
- Implement subscription products
- Add custom email templates
WordPress 7.0 + WooCommerce Considerations
- Test checkout with new admin interfaces
- AI connectors for product descriptions
- DataViews for order management screens
- RTC for collaborative order editing
Copy-Paste Prompts
Use @payment-integration to set up WooCommerce with Stripe
Use @billing-automation to create subscription products in WooCommerce
Phase 5: Performance Optimization
Skills to Invoke
web-performance-optimization - Performance optimization
database-optimizer - Database optimization
Actions
- Implement caching (object, page, browser)
- Optimize images (lazy loading, WebP)
- Minify and combine assets
- Enable CDN
- Optimize database queries
- Implement lazy loading
- Configure OPcache
- Set up Redis/Memcached
WordPress 7.0 Performance
- Client-side media processing
- Font Library enabled for all themes
- Responsive grid block optimizations
- View transitions reduce perceived load time
Performance Checklist
Copy-Paste Prompts
Use @web-performance-optimization to audit and improve WordPress performance
Phase 6: Security Hardening
Skills to Invoke
security-auditor - Security audit
wordpress-penetration-testing - WordPress security testing
sast-configuration - Static analysis
Actions
- Update WordPress core, themes, plugins
- Implement security headers
- Configure file permissions
- Set up firewall rules
- Enable two-factor authentication
- Implement rate limiting
- Configure security logging
- Set up malware scanning
WordPress 7.0 Security Considerations
- PHP 7.4 minimum (drops 7.2/7.3 support)
- Test Abilities API permission boundaries
- Verify collaboration data isolation
- AI connector credential security
Security Checklist
Copy-Paste Prompts
Use @wordpress-penetration-testing to audit WordPress security
Use @security-auditor to perform comprehensive security review
Phase 7: Testing
Skills to Invoke
test-automator - Test automation
playwright-skill - E2E testing
webapp-testing - Web app testing
Actions
- Write unit tests for custom code
- Create integration tests
- Set up E2E tests
- Test cross-browser compatibility
- Test responsive design
- Performance testing
- Security testing
WordPress 7.0 Testing Priorities
- Test with iframed post editor
- Verify DataViews integration
- Test collaboration (RTC) workflows
- Validate AI connector functionality
- Test Interactivity API with watch()
Copy-Paste Prompts
Use @playwright-skill to create E2E tests for WordPress site
Phase 8: Deployment
Skills to Invoke
deployment-engineer - Deployment
cicd-automation-workflow-automate - CI/CD
github-actions-templates - GitHub Actions
Actions
- Set up staging environment
- Configure deployment pipeline
- Set up database migrations
- Configure environment variables
- Enable maintenance mode during deployment
- Deploy to production
- Verify deployment
- Monitor post-deployment
Copy-Paste Prompts
Use @deployment-engineer to set up WordPress deployment pipeline
WordPress-Specific Workflows
Custom Post Type Development (RTC-Compatible)
register_post_type('book', [
'labels' => [...],
'public' => true,
'has_archive' => true,
'supports' => ['title', 'editor', 'thumbnail', 'excerpt'],
'menu_icon' => 'dashicons-book',
'show_in_rest' => true, // Enable for RTC
]);
register_post_meta('book', 'isbn', [
'type' => 'string',
'single' => true,
'show_in_rest' => true,
'sanitize_callback' => 'sanitize_text_field',
]);
Custom REST API Endpoint
add_action('rest_api_init', function() {
register_rest_route('myplugin/v1', '/books', [
'methods' => 'GET',
'callback' => 'get_books',
'permission_callback' => '__return_true',
]);
});
WordPress 7.0 AI Connector Usage
add_action('save_post', function($post_id, $post) {
if (wp_is_post_autosave($post_id) || wp_is_post_revision($post_id)) {
return;
}
if (!empty($post->post_excerpt)) {
return;
}
$content = strip_tags($post->post_content);
if (empty($content)) {
return;
}
if (!function_exists('wp_ai_client_prompt')) {
return;
}
$result = wp_ai_client_prompt(
'Create a brief 2-sentence summary of this content: ' . substr($content, 0, 1000)
);
if (is_wp_error($result)) {
return;
}
$result->using_temperature(0.3);
$summary = $result->generate_text();
if ($summary && !is_wp_error($summary)) {
wp_update_post([
'ID' => $post_id,
'post_excerpt' => sanitize_textarea_field($summary)
]);
}
}, 10, 2);
PHP-Only Block Registration (WordPress 7.0)
register_block_type('my-plugin/hello-world', [
'render_callback' => function($attributes, $content) {
return '<p class="hello-world">Hello, World!</p>';
},
'attributes' => [
'message' => ['type' => 'string', 'default' => 'Hello!']
],
]);
Abilities API Registration
add_action('wp_abilities_api_categories_init', function() {
wp_register_ability_category('content-creation', [
'label' => __('Content Creation', 'my-plugin'),
'description' => __('Abilities for generating and managing content', 'my-plugin'),
]);
});
add_action('wp_abilities_api_init', function() {
wp_register_ability('my-plugin/generate-summary', [
'label' => __('Generate Post Summary', 'my-plugin'),
'description' => __('Creates an AI-powered summary of a post', 'my-plugin'),
'category' => 'content-creation',
'input_schema' => [
'type' => 'object',
'properties' => [
'post_id' => ['type' => 'integer', 'description' => 'The post ID to summarize']
],
'required' => ['post_id']
],
'output_schema' => [
'type' => 'object',
'properties' => [
'summary' => ['type' => 'string', 'description' => 'The generated summary']
]
],
'execute_callback' => 'my_plugin_generate_summary_handler',
'permission_callback' => function() {
return current_user_can('edit_posts');
}
]);
});
function my_plugin_generate_summary_handler($input) {
$post_id = isset($input['post_id']) ? absint($input['post_id']) : 0;
$post = get_post($post_id);
if (!$post) {
return new WP_Error('invalid_post', 'Post not found');
}
$content = strip_tags($post->post_content);
if (empty($content)) {
return ['summary' => ''];
}
if (!function_exists('wp_ai_client_prompt')) {
return new WP_Error('ai_unavailable', 'AI client not available');
}
$result = wp_ai_client_prompt('Summarize in 2 sentences: ' . substr($content, 0, 1000))
->using_temperature(0.3)
->generate_text();
if (is_wp_error($result)) {
return $result;
}
return ['summary' => sanitize_textarea_field($result)];
}
WooCommerce Custom Product Type
add_action('init', function() {
class WC_Product_Custom extends WC_Product {
}
});
Quality Gates
Before moving to next phase, verify:
Related Workflow Bundles
development - General web development
security-audit - Security testing
testing-qa - Testing workflow
ecommerce - E-commerce development
(End of file - total 440 lines)
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.