Show HN: WordPress security skills for coding agents (github.com)

A new initiative has emerged within the AI/ML community designed to enhance WordPress security through the use of modular skills for AI coding agents such as Claude Code, Cursor, Codex, OpenCode, and Gemini CLI. These skills instruct the agents on how to generate secure-by-default WordPress code and conduct audits to fortify existing plugins and themes. Developers can easily implement these skills through a simple prompt, streamlining secure coding practices while addressing common pitfalls in AI-generated code, such as inadequate input validation and escaping. This development is significant as it empowers WordPress developers—especially those utilizing AI tools—by providing them with structured guidelines and best practices to follow. Each skill targets specific vulnerabilities, ranging from SQL injection prevention to proper nonce usage for CSRF protection, ensuring that AI-generated code adheres to security standards. Although the skills do not automatically enforce security measures, they lay a foundation for more secure development workflows, promoting accountability and thorough review processes among developers. Ultimately, this initiative aims to enhance the security posture of the WordPress ecosystem amid the growing reliance on AI in building and maintaining websites.