audit-nopriv
01WPDevelopers/essential-addons-for-elementor-lite
Command Claude Code
Audit wpajaxnopriv handlers for visibility leaks and other unauthenticated-request vulnerabilities.
WPDevelopers/essential-addons-for-elementor-lite
Command Claude Code
Audit wpajaxnopriv handlers for visibility leaks and other unauthenticated-request vulnerabilities.
WPDevelopers/essential-addons-for-elementor-lite
Command Claude Code
Design or audit Elementor controls for a widget — tabs, types, conditions, responsive, EA Pro patterns.
WPDevelopers/essential-addons-for-elementor-lite
Command Claude Code
Systematic root-cause debugging for an EA widget — reproduce, localize, trace, fix-at-root, guard.
WPDevelopers/essential-addons-for-elementor-lite
Command Claude Code
Scaffold a new EA widget end-to-end via the new-widget skill — PHP class, SCSS, optional JS, config.php, build, verify.
WPDevelopers/essential-addons-for-elementor-lite
Command Claude Code
Ship current changes via feature branch + PR using the pr-workflow skill. Hard refuses push to main.
WPDevelopers/essential-addons-for-elementor-lite
Command Claude Code
Pre-flight checklist for shipping an EA Lite version to WordPress.org. No phase skips, even for hotfixes.
WPDevelopers/essential-addons-for-elementor-lite
Command Claude Code
Five-axis senior audit of an EA widget (correctness, security, i18n, asset hygiene, architecture).
WPDevelopers/essential-addons-for-elementor-lite
Settings file Claude Code
Agent settings declaring 0 allowed tools.
WPDevelopers/essential-addons-for-elementor-lite
Skill Claude Code
Systematic root-cause debugging for an EA widget. Use when a widget is reported broken, a fix didn't take effect, editor and frontend diverge, or asset/AJAX failures are suspected. Reproduce → localize → trace → fix-at-root → guard. Every step ends with a confirming signal — no guesses.
WPDevelopers/essential-addons-for-elementor-lite
Skill Claude Code
Design and audit Elementor controls for an EA widget. Use when adding controls to a new or existing widget, refactoring a messy registercontrols(), deciding between control types, or wiring conditions, responsive, and selectors. Outputs control code that follows EA conventions and renders sensibly with default values.
WPDevelopers/essential-addons-for-elementor-lite
Skill Claude Code
Scaffold a new Essential Addons widget end-to-end — gather requirements, generate PHP class, SCSS, optional JS, register in config.php, optional Pro upsell, build, and verify. Use when adding any new widget, even simple display ones. Outputs files that already follow EA conventions (text domain, BEM, AssetBuilder…
WPDevelopers/essential-addons-for-elementor-lite
Skill Claude Code
Ship a change via a feature branch and pull request — never directly to the default branch. Use after any code change, fix, refactor, or docs update that needs to land on main. Branches are named from the FluentBoards card. Commits go through the husky pre-commit hook (lint-staged); pushes go to the feature branch…
WPDevelopers/essential-addons-for-elementor-lite
Skill Claude Code
Pre-flight checklist for shipping an EA Lite release to WordPress.org. Use when bumping a version, preparing a release branch, building a distribution zip, or before tagging. Walks through quality gates, version bump in three required files, changelog format, .distignore audit, and post-release verification. No phase…
WPDevelopers/essential-addons-for-elementor-lite
Skill Claude Code
Senior-level audit of a single EA widget across five axes — correctness, security, i18n, asset hygiene, and architecture. Use when asked to "review", "audit", or "check" a widget in includes/Elements/, before merging widget changes, or after porting a widget between Lite and Pro. Produces a structured report with…
WPDevelopers/essential-addons-for-elementor-lite
Skill Claude Code
Audit and fix WordPress AJAX handlers registered via wpajaxnopriv that build WPQuery args from client input. Catches the common pattern where a handler overrides poststatus/posttype to 'any' (or trusts client-supplied postin / author / metaquery) and ends up exposing private, draft, pending, future, trash, or…
WPDevelopers/essential-addons-for-elementor-lite
Skill Claude Code
Audit and fix WordPress / WooCommerce plugins that leak password-protected post content through AJAX handlers or listing-widget queries. Catches the specific gap that isvisible() + poststatus === 'publish' checks miss: password-protected posts keep poststatus='publish', so they bypass draft/private guards while their…
WPDevelopers/essential-addons-for-elementor-lite
Instructions file Claude Code
Claude Code instructions for WPDevelopers/essential-addons-for-elementor-lite, covering claude.md, project overview, build commands, architecture and bootstrap & plugin lifecycle.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: