菜单
Check and apply WordPress core and plugin updates via SSH. Verifies site responds after each update. Skips premium/private plugins. Supports check-only mode to see what's outdated without applying changes.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | wp-update |
| description | Check and apply WordPress core and plugin updates via SSH. Verifies site responds after each update. Skips premium/private plugins. Supports check-only mode to see what's outdated without applying changes. |
| triggers | ["update WordPress","update plugins","check for updates","WordPress outdated","plugin updates available"] |
Checks wordpress.org for available updates to WordPress core and free plugins, and optionally applies them. Verifies the site is still responding after each update — stops the chain if the site goes down.
# Check what's outdated (no changes made)
python scripts/management/wp-update.py --config config/config.yaml --check-only
# Update WordPress core only
python scripts/management/wp-update.py --config config/config.yaml --core
# Update specific plugins
python scripts/management/wp-update.py --config config/config.yaml --plugins elementor,rank-math,wordfence
# Update everything (core + all free plugins)
python scripts/management/wp-update.py --config config/config.yaml --all
# Preview what --all would do
python scripts/management/wp-update.py --config config/config.yaml --all --dry-run
Premium plugins (Elementor Pro, WooCommerce paid extensions, WPML, ACF Pro, etc.) are not on wordpress.org — the script skips them automatically. Update these via WP Admin > Plugins or via your plugin provider's account.
Safety: the script checks HTTP 200 from site_url after each update.
If the site goes down, it stops and reports. You must investigate manually
before updating further.
python scripts/management/wp-backup.py --config config/config.yaml
python scripts/management/wp-update.py --config config/config.yaml --all
Weekly:
wp-backup → wp-update --check-only (see what's outdated)
Monthly:
wp-backup → wp-update --all → wp-scan (update + verify clean)
# Via SSH:
grep wp_version /path/to/wp-includes/version.php
# Via this script:
python scripts/management/wp-update.py --config config/config.yaml --check-only
Deploy a theme, plugin, or wp-content subset to a WordPress server from a CI/CD pipeline, with automatic pre-deploy backup, post-deploy health check, and automatic rollback on failure. Designed for GitHub Actions, GitLab CI, or any pipeline that can run Python.
Security and integrity audit for WooCommerce stores. Checks REST API key scope, payment gateway exposure, webhook HTTPS enforcement, suspicious $0 orders, exposed wc-logs (PII/payment data), and coupon abuse.
Scaffold and deploy a WordPress child theme via SSH. Generates style.css, functions.php (with correct parent style enqueueing), and index.php. Supports Kadence, Astra, GeneratePress, Hello Elementor, OceanWP, and any custom parent. Can activate the child theme immediately after creation.
Safely switch WordPress themes via SSH with automatic rollback if the site goes down. Records the previous theme for instant rollback. Verifies HTTP 200 before and after the switch.
Security audit of WordPress themes via SSH. Scans for PHP malware patterns, injected scripts, recently modified files, and unexpected file types. Also checks DB for customizer injections and Elementor postmeta payloads. Use after any attack or before going live with a new/inherited theme.
Comprehensive guide to building, maintaining, and recovering Elementor-based WordPress sites. Covers the CSS pipeline, global styles (Kit), common post-attack failures and fixes, Pro vs Free features, and integration with Kadence and Hello Elementor themes.