agent-skills

wp-vip-code-review

Review WordPress VIP code changes

Reviews WordPress VIP code changes with PHPCS and a manual platform pass, then separates merge blockers, warnings and pre-existing findings.

• Runs PHPCS with the WordPress-VIP-Go standard on changed files.
• Keeps PHPCS findings that fall on changed lines.
• Checks caching, queries, remote requests, files, capabilities, cron and redirects by hand.

Stays safeKeeps the review read-only and offers fixes as text until the user requests changes.

wp-multisite-migration

Move WordPress multisite sites

Moves a WordPress site between multisite and standalone installs with backups, staged rehearsal, verification, cut-over steps and rollback.

• Handles subsite extraction and standalone site imports.
• Covers tables, users, uploads, domains, plugins, themes and redirects.
• Uses backups, previews and verification around every write.

Stays safeStarts with scripts/inventory.sh and read-only inspection before planning changes.

wp-database-collation-drift

Trace WordPress database collation drift

Traces WordPress collation and character set errors to the affected tables and columns, then proposes the narrowest checked change.

• Maps server, connection, table and column collations.
• Finds the failing query, caller and affected columns.
• Proposes checked changes with backup and rollback steps.

Stays safeKeeps investigation read-only until the owner approves each change.

woo-hpos-live-migration

Migrate WooCommerce orders to HPOS

Moves a live WooCommerce store from posts storage to HPOS through compatibility checks, staging, synchronization, verification, cut-over and rollback.

• Audits plugins, themes, custom code and outside systems for HPOS compatibility.
• Backfills and verifies order data before switching storage.
• Keeps compatibility mode available during the post-switch soak period.

Stays safeRuns read commands until the user approves a specific change step.

woo-stock-reservation-reconciliation

Reconcile WooCommerce stock reservations safely

Explains where WooCommerce stock is held, reduced or restored, then reconciles discrepancies with owner-approved corrections and rollback steps.

• Maps reservations, unpaid orders and deducted stock per product.
• Compares WooCommerce stock with the owner's shelf count.
• Applies each correction separately with a backup, check and undo.

Stays safeStarts with read-only reports and runs scanning SQL on staging, a replica or at a quiet hour.

woo-scheduled-sale-state-audit

Audit WooCommerce scheduled sale state

Find why scheduled sales show, charge or list the wrong price, then plan fixes through WooCommerce's own functions.

• Compares stored prices, sale windows and scheduled events.
• Checks variable products, lookup rows, transients and caches.
• Pairs every proposed fix with a backup, check and undo.

Stays safeReads and compares by default before proposing any change.

woo-product-lookup-integrity

Check WooCommerce product lookup integrity

Checks WooCommerce product lookup tables row by row, finds mismatch classes, confirms samples, and verifies approved repairs.

• Compares lookup rows with product meta, terms and variations.
• Classifies missing, stale, orphaned and structurally wrong rows.
• Runs the same checks before and after each approved repair.

Stays safeStarts with read-only helpers, SQL and WP-CLI checks that need no approval.

woo-tax-rounding-trace

Trace WooCommerce tax rounding differences

Trace one WooCommerce order to find where tax, totals, refunds or gateway amounts first differ by a cent or a few.

• Rebuilds cart and order arithmetic under both rounding settings.
• Compares stored values with checkout, REST, email, refund and gateway figures.
• Names the first divergent stage and the WooCommerce function behind it.

Stays safeKeeps diagnosis read-only until the owner approves one defined change.

woo-checkout-performance-audit

Audit WooCommerce checkout performance

Finds where a live WooCommerce checkout spends time, measures the cause, and verifies each approved change with matching before and after tests.

• Measures checkout requests from the browser through the database.
• Checks sessions, Action Scheduler, gateways, shipping, caching, hooks and indexes.
• Reports measured before and after numbers for each approved change.

Stays safeStarts with read-only measurements and waits for owner approval before each change.

wp-cwv-field-triage

Trace WordPress Core Web Vitals

Traces poor WordPress Core Web Vitals from field data to the plugin, theme, setting or third-party tag responsible.

• Starts with CrUX, Search Console or site RUM field evidence.
• Maps slow scripts, images and elements to WordPress owners.
• Separates confirmed causes from likely causes and lab hypotheses.

Stays safeStarts read-only and asks for approval before each site change.

wp-slow-query-investigation

Investigate slow WordPress queries

Finds costly WordPress database queries, traces them to their code, reads execution plans and tests the safest fix with before and after measurements.

• Ranks queries by total database time across site traffic.
• Traces expensive statements to WordPress, WooCommerce, plugins or themes.
• Tests query changes, caching and indexes against measured execution plans.

Stays safeStarts read-only and asks for owner approval before each change.

wp-cron-action-scheduler-health

Keep WP-Cron and Action Scheduler healthy

Moves scheduled WordPress work to a server cron, diagnoses missed or duplicate jobs, and keeps Action Scheduler queues healthy.

• Finds every cron runner before changing the schedule.
• Diagnoses late, failed and duplicate WP-Cron events and actions.
• Checks Action Scheduler backlogs, claims, failures, cleanup and runner activity.

Stays safeStarts read-only and asks for owner approval before each change.

wp-autoload-audit

Audit WordPress autoloaded options

Measures WordPress autoloaded options, finds who owns the largest entries, and safely removes, deletes or changes what should not load on every request.

• Measures the options WordPress loads on every request.
• Finds the plugin, theme or core feature behind large options.
• Tests each change with an export, check and staged undo.

Stays safeStarts read-only and waits for owner approval before each change.

wp-full-site-scan

Scan and recover a hacked WordPress site

Scans a hacked WordPress site across files and database, finds the entry point, cleans copies, restores safely and closes the way back in.

• Checks WordPress core, plugins and themes against official checksums first.
• Scans files and database for malware, backdoors, injected code and hidden access.
• Builds a timeline, cleans both sides together and verifies the restored site.

Stays safeWorks on copies and keeps the original files and database unchanged until restore.

agent-tool-call-audit

Audit agent tool calls

Reviews recorded agent tool calls for scope creep, data exposure, unsafe actions, injected instructions and mismatches with declared tool annotations.

• Ties every finding to the exact recorded call.
• Checks scope, exposed data, approvals, injected instructions and tool annotations.
• Keeps evidence separate from inference with confidence labels.

Stays safeWorks from local copies and keeps the audit read-only.

rag-corpus-audit

Audit a RAG knowledge base

Audits a RAG corpus for chunk problems, coverage gaps, duplicates, stale claims, contradictions, sensitive data and missing metadata before indexing.

• Checks chunks, metadata, duplicates, stale claims and contradictions.
• Finds secrets, personal data and hidden instructions before indexing.
• Measures coverage against the questions users ask.

Stays safeWorks from exports or copies and keeps the audit read-only.