Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Lonsdale201/wp-agent-skills --skill jfb-form-sidebar-panelgit clone --depth 1 https://github.com/Lonsdale201/wp-agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lonsdale201/wp-agent-skills/jfb-form-sidebar-panel)<a href="https://agentmods.dev/skills/lonsdale201/wp-agent-skills/jfb-form-sidebar-panel"><img src="https://agentmods.dev/badge/skills/lonsdale201/wp-agent-skills/jfb-form-sidebar-panel/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lonsdale201/wp-agent-skills/jfb-form-sidebar-panel"><img src="https://agentmods.dev/badge/skills/lonsdale201/wp-agent-skills/jfb-form-sidebar-panel.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00186 | $0.04833 |
| Opus 5 | $0.00093 | $0.02416 |
| Sonnet 5 | $0.00037 | $0.00967 |
| Haiku 4.5 | $0.00019 | $0.00483 |
Grade A, and why
jfb-form-sidebar-panel scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 372 lines — stays where its author put it; the contents beside it link to each section on GitHub.
JetFormBuilder: form-level settings panel in the Gutenberg sidebar
JetFormBuilder forms are stored as a custom post type (jet-form-builder) edited in the standard Gutenberg block editor. Companion plugins add per-form settings by injecting a panel into the editor's document sidebar — the panel reads and writes post meta on the form, so each form gets its own configuration independently of the plugin's global Settings page.
This skill covers that subsystem. It is distinct from the global plugin Settings page covered in the jfb-settings-tab skill — that one uses Vue + cx-vui components, this one uses WordPress packages (@wordpress/components, React under the hood) and standard post-meta REST exposure.
A typical JFB companion plugin (e.g. media-storage-for-jetformbuilder) ships both: a global tab for site-wide defaults, and a per-form sidebar panel for overrides. See the Dual-mode pattern section below.
API stability note
The register_post_meta + REST exposure pattern is standard WordPress and stable since WP 4.9. The JFB-specific pieces — the 'jet-form-builder/editor-assets/before' PHP action, the 'jet.fb.register.plugins' JS filter, and the useMetaState hook exposed on window.JetFBHooks — are stable across the JFB 3.x line in the source observed. The plugin-version-tested field records last end-to-end verification only.
When to use this skill
- A JFB companion plugin needs settings that differ between forms.
- The user asks how to add a sidebar panel to the JFB form editor.
- The diff/files contain
register_post_metafor thejet-form-builderpost type,jet.fb.register.plugins,jet-form-builder/editor-assets/before, oruseMetaState.
Architecture in one paragraph
The JFB form CPT (jet-form-builder) registers post meta keys with 'show_in_rest' => true and an auth_callback, making them readable and writable through the WordPress REST API. The Gutenberg post editor automatically syncs registered REST meta with its data store, so any UI bound to that meta auto-saves when the user clicks "Update". JFB exposes a JS filter 'jet.fb.register.plugins' that collects panel definitions, each containing a render function. Inside the render function, the panel calls JFB's useMetaState hook (a thin wrapper around Gutenberg's useEntityProp) to bind component state to a meta key, then renders WP standard form controls.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 372 lines · 186 tokens per session scan A 332c852aea6f
jfb-form-sidebar-panel is a skill published in the GitHub repository Lonsdale201/wp-agent-skills (22 stars, last pushed 2d ago), licensed MIT. It adds 186 tokens to every session and 4,833 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
nextjs-on-cloudflare
Build, migrate, and deploy Next.js apps on Cloudflare Workers with vinext. Use when starting a Next.js project on Cloudflare, moving an existing app to Workers, choosing between vinext and OpenNext, or setting up vinext for Workers. For setup, migration, or deployment, install vinext's upstream skills with npx skills…
skillshare-ui-website-style
Skillshare frontend design system for the React dashboard (ui/) and Docusaurus website (website/). Use this skill whenever you: build or modify a dashboard page or component in ui/src/, style or layout website pages or custom CSS in website/, create new React components for the dashboard, add pages to the dashboard…
web-design-engineer
Build or redesign polished browser-rendered visual artifacts with HTML/CSS/JavaScript/React: pages, dashboards, prototypes, slide decks, animations, UI mockups, and data visualizations. Use for visual front-end creation, design-system exploration, design critique, or explicit browser acceptance / QA of a web artifact.…
json-ui
CRITICAL: Use for json-ui component rendering and development. Triggers on: json-ui, json render, component catalog, report render, HTML report, I18nString, i18n, bilingual, language switch, dual language, PaperHeader, AuthorList, Abstract, MetricsGrid, Section, Highlight, Zod schema, catalog.ts, cli.ts…
remotion-markup
Best practices for writing Remotion React Markup.
vercel-react-best-practices
React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance…