Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Lonsdale201/wp-agent-skills --skill classic-theme-customizergit clone --depth 1 https://github.com/Lonsdale201/wp-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lonsdale201/wp-agent-skills/classic-theme-customizer)<a href="https://agentmods.dev/skills/lonsdale201/wp-agent-skills/classic-theme-customizer"><img src="https://agentmods.dev/badge/skills/lonsdale201/wp-agent-skills/classic-theme-customizer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lonsdale201/wp-agent-skills/classic-theme-customizer"><img src="https://agentmods.dev/badge/skills/lonsdale201/wp-agent-skills/classic-theme-customizer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00131 | $0.02320 |
| Opus 5 | $0.00066 | $0.01160 |
| Sonnet 5 | $0.00026 | $0.00464 |
| Haiku 4.5 | $0.00013 | $0.00232 |
Grade A, and why
classic-theme-customizer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 296 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Classic Theme Customizer
Use this when adding or reviewing Customizer settings for a classic PHP theme. This is for theme presentation choices such as colors, layout toggles, logo-adjacent display settings, and small design options.
Do not use theme Customizer settings for plugin-like business data, payment credentials, complex content models, or cross-theme application state.
When to Use This Skill
- Adding
customize_registercode to a classic theme. - Creating a color, select, checkbox, text, image, or layout option.
- Reviewing
get_theme_mod()output in templates. - Adding live preview with
postMessageor selective refresh. - Fixing unsanitized Customizer settings or controls registered outside the correct hook.
Registration Hook
Register settings, sections, and controls on customize_register.
add_action( 'customize_register', 'mytheme_customize_register' );
function mytheme_customize_register( WP_Customize_Manager $wp_customize ) {
$wp_customize->add_section(
'mytheme_layout',
array(
'title' => __( 'Layout', 'textdomain' ),
'priority' => 160,
)
);
}
Rules:
- Use the
WP_Customize_Managerinstance passed to the hook. - Prefix setting IDs with the theme slug.
- Keep Customizer setup in
inc/customizer.phpor a similarly scoped include, loaded fromfunctions.php. - Do not register controls during normal template rendering.
Settings Must Sanitize
Every custom setting needs a sanitize_callback.
$wp_customize->add_setting(
'mytheme_accent_color',
array(
'default' => '#0a7a75',
'type' => 'theme_mod',
'capability' => 'edit_theme_options',
'transport' => 'refresh',
'sanitize_callback' => 'sanitize_hex_color',
)
);
Rules:
- Prefer
type => 'theme_mod'for theme design settings. - Use
type => 'option'only when the value is intentionally shared beyond the active theme. - When using
type => 'option', setautoload => falsefor values that are not needed on most requests; core's multidimensional option save defaults to autoloading unless an autoload arg is supplied. - The default capability is
edit_theme_options; set it explicitly when clarity helps. - Use
transport => 'refresh'unless live preview is actually implemented. - Add
validate_callbackwhen a value can be syntactically valid but semantically unacceptable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 296 lines · 131 tokens per session scan A 97fc3f1f1f57
classic-theme-customizer is a skill published in the GitHub repository Lonsdale201/wp-agent-skills (22 stars, last pushed 2d ago), licensed MIT. It adds 131 tokens to every session and 2,320 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
frontend-design
Guidance for distinctive, intentional visual design when building new UI or reshaping an existing one. Helps with aesthetic direction, typography, and making choices that don't read as templated defaults.
visual-plan
Turn ordinary text plans into rich interactive visual plans with diagrams, file maps, annotated code, open questions, and UI/prototype review when useful.
visual-edit
Open a running local app in Design overview mode as URL-backed iframe screens for visual editing, flow review, duplication, and route-state exploration. Use when the user asks to inspect, compare, or edit a real local app visually in Design.
muapi-ui-design
Generate high-fidelity UI/UX mockups for mobile and web apps using Atomic Design principles — creates wireframes and design systems via muapi.ai.
display-glasses-with-jetpack-compose-glimmer
Provides guidelines for developing projected Android XR apps for display glasses using the Jetpack Compose Glimmer UI toolkit. This skill covers foundational Glimmer design principles, workflows for implementing Jetpack Compose Glimmer, and interaction models for the glasses form factor. Use this skill to build an…
antv-x6-editor
A skill for creating and troubleshooting interactive diagrams with AntV X6, a JavaScript engine for editors made of connected nodes and lines. It supports diagram types such as flowcharts, dependency graphs, entity-relationship diagrams, and organization charts.