nvdigitalsolutions

nvdigitalsolutions/mcp-ai-wpoos

Skill Claude CodeCodex

Audits WordPress plugin or theme PHP code for the most common security mistakes — missing nonce checks, capability checks, input sanitization, output escaping, unslashing, SQL preparation, AJAX nopriv exposure, file/path traversal, and unsafe redirects. Use when reviewing pull requests, before releasing a plugin, when…

nvdigitalsolutions/mcp-ai-wpoos

Skill Claude CodeCodex

Deep security audit for WordPress plugin/theme PHP code, covering issues beyond the basic sanitize/escape/nonce checklist — PHP object injection (unserialize), SSRF in remote requests, CSRF on state-changing GET handlers, mass assignment via $POST loops, insecure file include / template injection, mail header…

nvdigitalsolutions/mcp-ai-wpoos

Skill Claude CodeCodex

Audits WordPress plugin/theme code for secret-handling and credential issues — hardcoded API keys, DB credentials, or signing secrets in source; weak randomness (rand, mtrand, uniqid) used for security tokens, password reset links, nonces, or session IDs; password storage with md5/sha1/crypt instead of passwordhash…

nvdigitalsolutions/mcp-ai-wpoos

Skill Claude CodeCodex

Handle UTF-8 and text encoding safely in WordPress plugins, especially on WP 6.9+ where wpisvalidutf8(), wpscrubutf8(), and noncharacter helpers replace older seemsutf8-style checks. Covers when to validate, scrub, reject, or preserve invalid bytes; wpcheckinvalidutf8 behavior; XML/JSON/feed/export boundaries; and…

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Writer for the Agent Client Protocol (ACP) integration — JSON-RPC 2.0 server, session management, toolcall mapping, and federation discovery advertisement.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Writer scoped to a single NV oOS addon at a time (algorave / canvas / cornerstone3d / embedded / fantasy-football / graphify) — must not cross addon boundaries.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Writer for bundled Agent Skills (SKILL.md) under includes/bundled-skills/ and addons/pro/includes/bundled-skills/, with mandatory THIRDPARTYNOTICES updates.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Writer for the NV oOS chat frontend — JS, CSS, blocks, and Elementor widget. Honours wp.i18n, jQuery compat, localStorage transcripts, and guest-token flow.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Writer restricted to documentation — docs/, README.md, readme.txt, CHANGELOG.md. Refuses any change under includes/, addons/, or assets/.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Read-only PHP-compatibility reviewer — enforces PHP 7.4+ in the base plugin and PHP 8.1+ in the Pro addon, blocking syntax that breaks the supported floor.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Writer for PHPUnit tests under tests/ and addons/pro/tests/ — adds Test classes for tools, REST routes, and helpers without modifying production code.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Writer for release artifacts — version bumps, CHANGELOG, readme.txt stable tag, and bin/build-addon-zips.sh ZIPs. Never runs git push or gh release create.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Writer for NV oOS slash commands — scaffolds new command classes under includes/slash-commands/commands/ and registers them with the toolkit manager.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Scaffolds and edits NV oOS tool classes under includes/tools/ (Base) and addons/pro/includes/tools/ (Pro), respecting the Base-vs-Pro split and the registry pattern.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Writer scoped to a single NV oOS toolkit-SPA addon at a time (toolkit-shell / canvas-toolkit / document-editor / ohif-viewer / media-studio / video-studio). Must not cross addon boundaries, must not edit base plugin or Pro addon code.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Read-only auditor for WordPress.org plugin-review compliance — flags settimelimit, attribution, doshortcode wrap, CLI write paths, and missing External Services entries.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Read-only reviewer for NV oOS REST endpoints — checks permissions, sanitization, escaping, and schema correctness without modifying code.

nvdigitalsolutions/mcp-ai-wpoos

Agent Claude Code

Read-only WordPress security auditor — checks capability gates, nonces, sanitization, escaping, prepared SQL, SSRF, and upload validation across the codebase.

nvdigitalsolutions/mcp-ai-wpoos

Skill Claude CodeCodex

How NV oOS approval gates work for operator credentials and how to phrase tool requests so the human can adjudicate quickly. Use whenever a write-capable tool call pauses for approval or when planning a destructive change.

nvdigitalsolutions/mcp-ai-wpoos

Skill Claude CodeCodex

Operating NV oOS WordPress sites through scoped MCP operator credentials — tool groups, task recipes, and site disambiguation. Use when working with NV oOS tools (createpost, wooproducts, toolkitcpt, paperstore, jetengine) on any managed site.

nvdigitalsolutions/mcp-ai-wpoos

Skill Claude CodeCodex

Per-site fact template for NV oOS fleets. The human fills in one file per managed site (store URL, brand, voice, active campaigns); you load the relevant file before acting on that site. Use whenever starting work on a site or when you need brand/store facts.

nvdigitalsolutions/mcp-ai-wpoos

Skill Claude CodeCodex

Google Calendar skill for managing calendars, events, and free/busy queries via the gws CLI. Covers creating, updating, listing, and deleting events across multiple calendars.

nvdigitalsolutions/mcp-ai-wpoos

Skill Claude CodeCodex

Google Docs skill for creating, reading, and updating documents via the gws CLI. Covers document creation, content retrieval, batch updates, and sharing.

nvdigitalsolutions/mcp-ai-wpoos

Skill Claude CodeCodex

Google Drive skill for managing files, folders, and shared drives via the gws CLI. Covers listing, searching, uploading, downloading, sharing, and organising Drive content.