Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/iwritec0de/wp-dev/wp-hooks-refgit clone --depth 1 https://github.com/iwritec0de/wp-devWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00010 | $0.00526 |
| Opus 5 | $0.00005 | $0.00263 |
| Sonnet 5 | $0.00002 | $0.00105 |
| Haiku 4.5 | $0.00001 | $0.00053 |
Grade A, and why
wp-hooks-ref scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 66 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/wp-hooks-ref
Look up WordPress and WooCommerce hooks by name or topic.
Instructions
Load the wp-hooks skill for hook documentation methodology.
The user provides a hook name, partial name, or topic after /wp-hooks-ref. For example:
/wp-hooks-ref save_post— Show thesave_posthook details/wp-hooks-ref woocommerce_checkout— List hooks matching "woocommerce_checkout"/wp-hooks-ref auth— Search for authentication-related hooks
Behavior
-
Exact match: If the argument matches a known hook name exactly, provide:
- Hook type (action or filter)
- Function signature with parameters and types
- When it fires (context)
- Common use cases with code examples
- Related hooks
-
Partial match / prefix: If the argument is a prefix (e.g.,
woocommerce_), list all matching hooks from the plugin's reference files, grouped by category. -
Topic search: If the argument is a general topic (e.g., "auth", "login", "media"), search for related hooks and present them organized by relevance.
Reference Sources
First check the plugin's built-in references:
skills/woocommerce/references/woo-hooks.mdfor WooCommerce hooksskills/wordpress-patterns/SKILL.mdfor common WordPress patterns
For hooks not covered in the local references, use your built-in knowledge of the WordPress hook system. Only use WebSearch as a last resort for very specific or rarely-used hooks.
Output Format
For each hook, provide:
## hook_name (action|filter)
**Signature:** `do_action( 'hook_name', $param1, $param2 )` or `apply_filters( 'hook_name', $value, $context )`
**Parameters:**
- `$param1` (type) — Description
- `$param2` (type) — Description
**Fires:** Description of when this hook fires.
**Example:**
\`\`\`php
add_action( 'hook_name', function ( $param1, $param2 ): void {
// Usage example
}, 10, 2 );
\`\`\`
**Related:** `other_hook`, `another_hook`
If no arguments are provided, ask the user what hook they want to look up.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 66 lines · 10 tokens per session scan A 2f201667bca2
wp-hooks-ref is a command published in the GitHub repository iwritec0de/wp-dev (1 stars, last pushed 4mo ago), licensed MIT. It adds 10 tokens to every session and 526 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
merge
Finalize work on a branch: verify docs + tree are clean, merge to main, clean up. Supports both standard git checkout -b branches and git worktree flows — auto-detected at pre-flight.
expect
Diff-aware AI browser testing — reads the git diff, maps changes to affected pages via the route map, generates a targeted test plan, and executes it via agent-browser (Rust daemon + CDP, ARIA-tree-first) with pass/fail reporting. Use when testing UI changes, verifying PRs before merge, or running regression checks on…
speckit.tasks
Generate an actionable, dependency-ordered tasks.md for the feature based on available design artifacts.
dev
Runs Vendure in development mode. By default it starts three processes: the GraphQL server (ts-node ./src/index.ts), the worker (ts-node ./src/index-worker.ts), and the dashboard (a Vite dev server).
start
Runs a project that has already been compiled with vendure build.
pipeline-undo
Undo a pipeline run's result. With worktree isolation (the current engine), this is clean and low-risk: a run never touches your checkout — its result lives only on a pipeline/ branch (and, for a --push run, on the remote). "Undo" therefore means deleting that branch and its worktree, not reverting your working tree.