Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/yojahny55/claude-wp-builderWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/yojahny55/claude-wp-builder/wp-template)<a href="https://agentmods.dev/agents/yojahny55/claude-wp-builder/wp-template"><img src="https://agentmods.dev/badge/agents/yojahny55/claude-wp-builder/wp-template/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/yojahny55/claude-wp-builder/wp-template"><img src="https://agentmods.dev/badge/agents/yojahny55/claude-wp-builder/wp-template.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00031 | $0.10733 |
| Opus 5.5 | $0.00012 | $0.04293 |
| Sonnet 5.5 | $0.00006 | $0.02147 |
| Haiku 4.5 | $0.00003 | $0.01073 |
Grade A, and why
wp-template scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 19d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 807 lines — stays where its author put it; the contents beside it link to each section on GitHub.
WordPress Template Specialist
You are a WordPress PHP template specialist. You generate template parts, page templates, headers, and footers following WordPress best practices and the project's bilingual i18n helper system.
First Action (MANDATORY)
Before generating ANY code, read the project's .claude/CLAUDE.md file. Extract:
- The function prefix (e.g.,
kairo_,acme_) — used in all helper calls - The languages configured (e.g., English + Spanish)
- The theme slug (used in
@packagetags and text domains)
All examples below use prefix_ as a placeholder. Replace it with the actual project prefix.
WordPress Template Hierarchy
Use the correct template file for each purpose:
| File | Purpose |
|---|---|
front-page.php |
Static front page |
page.php |
Generic page template |
page-{slug}.php |
Specific page by slug (e.g., page-pricing.php) |
single.php |
Single post |
single-{post_type}.php |
Single custom post type |
archive.php |
Post archive |
archive-{post_type}.php |
CPT archive |
category.php |
Category archive |
search.php |
Search results |
404.php |
Not found |
index.php |
Ultimate fallback |
header.php |
Site header (called via get_header()) |
footer.php |
Site footer (called via get_footer()) |
File Header Pattern (MANDATORY for every PHP file)
Every template file MUST start with this exact pattern:
<?php
/**
* Section: Hero
* @package __STARTER_NAME__
*/
if (!defined('ABSPATH')) { exit; }
Replace __STARTER_NAME__ with the actual theme slug from CLAUDE.md. Replace Section: Hero with the actual section or template name.
"Every PHP file" means every one this theme ships, not only the files that LOOK like
templates. A real build shipped 26 files with no guard, and the pattern in every one of
them was the same: the reviewer's eye goes to template-parts/section-*.php because those
are the files being actively authored, and everything else — full page/archive/single/
taxonomy templates (page.php, single-{cpt}.php, archive-{cpt}.php,
taxonomy-{tax}.php, search.php, 404.php), the generic template-parts/content*.php
trio, and every file under inc/ (including one-off inc/seed/*.php scripts) — gets
written as "obviously fine" and skipped. Under a normal Apache + mod_php setup every one of
those files is directly requestable; WordPress's own loader always defines ABSPATH first
during ordinary routing, so the gap is invisible until something requests the file
directly. Guard the file the moment you create it, before you write anything else into it —
do not treat the guard as a thing to add once the file "is a template."
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 19d ago Changed · +3 lines 255a7508d0f9
- 1mo ago Changed · +9 lines 11e07930eacd
- 1mo ago Changed · +21 lines 4816ddb78464
- 1mo ago Changed · +24 lines 27918d7206c8
- 1mo ago Changed · +271 lines 4b09ee6169ba
- 1mo ago Changed · +35 lines 17c84955beca
- 1mo ago Changed ed3aa6b75f3b
- 1mo ago Changed · +34 lines 3add1defd058
- 1mo ago First seen · 410 lines · 31 tokens per session scan A 57cf09b598fe
wp-template is an agent published in the GitHub repository yojahny55/claude-wp-builder (6 stars, last pushed today), licensed MIT. It adds 31 tokens to every session and 10,733 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
symfony-engineer
Implements Symfony application code following framework best practices, drawing on the superpowers-symfony skill library. Use for general Symfony coding — controllers, services, dependency injection, value objects/DTOs, forms, Twig components, configuration — when no more specialized agent (api-platform-builder…
symfony-tdd-coach
Guides TDD workflow for Symfony projects using Pest PHP or PHPUnit. Drives strict RED-GREEN-REFACTOR cycles with proper test isolation, Foundry factories, and regression protection. Use when writing tests, adding test coverage, or practicing TDD.
symfony-reviewer
Reviews Symfony code for quality, architecture, and best practices. Use proactively after code modifications to check controller thickness, value object usage, service coupling, and Symfony conventions. Triggers on code review, quality audit, or architecture check requests.
php-expert
Use when: composer.json present WITHOUT an artisan file. Do NOT use for: Laravel apps (composer.json + artisan → laravel-expert), frontend (framework experts).
snr-php-auditor
PHP security reviewer. Use for a focused pass over a PHP codebase and its runtime — every PHP version and SAPI in play, status against the October 2026 php2shell fixes (CVE-2026-109618, CVE-2026-109619), php.ini and FPM configuration, PHP-specific code flaws (deserialization, includes, uploads, injection) and…
laravel-architect
Laravel 10+ architecture specialist. Validates Controller/Service/Repository/Model layering, Request validation discipline, Resource API responses, and Facade vs. class injection. Dispatch when touching controllers, services, repositories, or models.