nvdigitalsolutions/mcp-ai-wpoos
Skill Claude CodeCodex
Audits WordPress plugin or theme PHP code for the most common security mistakes — missing nonce checks, capability checks, input sanitization, output escaping, unslashing, SQL preparation, AJAX nopriv exposure, file/path traversal, and unsafe redirects. Use when reviewing pull requests, before releasing a plugin, when…
nvdigitalsolutions/mcp-ai-wpoos
Skill Claude CodeCodex
Deep security audit for WordPress plugin/theme PHP code, covering issues beyond the basic sanitize/escape/nonce checklist — PHP object injection (unserialize), SSRF in remote requests, CSRF on state-changing GET handlers, mass assignment via $POST loops, insecure file include / template injection, mail header…
nvdigitalsolutions/mcp-ai-wpoos
Skill Claude CodeCodex
Audits WordPress plugin/theme code for secret-handling and credential issues — hardcoded API keys, DB credentials, or signing secrets in source; weak randomness (rand, mtrand, uniqid) used for security tokens, password reset links, nonces, or session IDs; password storage with md5/sha1/crypt instead of passwordhash…
nvdigitalsolutions/mcp-ai-wpoos
Skill Claude CodeCodex
Handle UTF-8 and text encoding safely in WordPress plugins, especially on WP 6.9+ where wpisvalidutf8(), wpscrubutf8(), and noncharacter helpers replace older seemsutf8-style checks. Covers when to validate, scrub, reject, or preserve invalid bytes; wpcheckinvalidutf8 behavior; XML/JSON/feed/export boundaries; and…
nvdigitalsolutions/mcp-ai-wpoos
Agent
Writer for the Agent Client Protocol (ACP) integration — JSON-RPC 2.0 server, session management, toolcall mapping, and federation discovery advertisement.
nvdigitalsolutions/mcp-ai-wpoos
Agent
Writer scoped to a single NV oOS addon at a time (algorave / canvas / cornerstone3d / embedded / fantasy-football / graphify) — must not cross addon boundaries.
nvdigitalsolutions/mcp-ai-wpoos
Agent
Writer for bundled Agent Skills (SKILL.md) under includes/bundled-skills/ and addons/pro/includes/bundled-skills/, with mandatory THIRDPARTYNOTICES updates.
nvdigitalsolutions/mcp-ai-wpoos
Agent
Writer for the NV oOS chat frontend — JS, CSS, blocks, and Elementor widget. Honours wp.i18n, jQuery compat, localStorage transcripts, and guest-token flow.
nvdigitalsolutions/mcp-ai-wpoos
Agent
Writer restricted to documentation — docs/, README.md, readme.txt, CHANGELOG.md. Refuses any change under includes/, addons/, or assets/.
nvdigitalsolutions/mcp-ai-wpoos
Agent
Read-only PHP-compatibility reviewer — enforces PHP 7.4+ in the base plugin and PHP 8.1+ in the Pro addon, blocking syntax that breaks the supported floor.
nvdigitalsolutions/mcp-ai-wpoos
Agent
Writer for PHPUnit tests under tests/ and addons/pro/tests/ — adds Test classes for tools, REST routes, and helpers without modifying production code.
nvdigitalsolutions/mcp-ai-wpoos
Agent
Writer for release artifacts — version bumps, CHANGELOG, readme.txt stable tag, and bin/build-addon-zips.sh ZIPs. Never runs git push or gh release create.
nvdigitalsolutions/nv-remote-mcp-server
Instructions file
Claude Code instructions for nvdigitalsolutions/nv-remote-mcp-server, covering mcp server with github oauth - implementation guide, core principles, kiss (keep it simple, stupid), yagni (you aren't gonna need it) and open/closed principle.