Php

laravel-verification is a pre-PR and pre-deploy workflow for Laravel projects. Use this laravel-verification skill to run install, environment, Composer, linting, tests, security, and release readiness checks in sequence with less guesswork.

laravel-tdd is a Laravel test-driven-development guide for PHPUnit and Pest. It helps with unit, feature, and integration test choices, database strategy, fakes, coverage targets, and a practical workflow for test automation.

The laravel-security skill is a practical Laravel security checklist for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment. Use it for audits, feature reviews, and hardening work in Laravel apps.

laravel-plugin-discovery helps you discover and evaluate Laravel packages via LaraPlugins.io MCP. Use it to assess package health, check Laravel/PHP compatibility, and find options for API Development before you install.

laravel-patterns helps you design Laravel apps with cleaner boundaries: thin controllers, services or actions for business logic, predictable Eloquent data access, and practical patterns for queues, events, caching, and API resources. It is built for backend development teams that need maintainable production apps, not quick one-off scaffolding.

constant-time-analysis is a security-audit skill for finding timing side-channel risks in cryptographic code before they become exploitable bugs. Use it to review secret-dependent math, branches, comparisons, and compiled output when checking C, C++, Go, Rust, Swift, Java, Kotlin, PHP, JavaScript, TypeScript, Python, or Ruby.

The wp-playground skill helps you create disposable, reproducible WordPress Playground environments for plugin and theme testing, version switching, blueprints, snapshots, and isolated debugging. It supports browser or CLI workflows via @wp-playground/cli and is especially useful for backend development, QA, and controlled issue reproduction.

wp-phpstan helps configure, run, and fix PHPStan in WordPress plugins, themes, and sites. Use it for phpstan.neon setup, baseline workflow, WordPress-aware typing, and handling optional plugin classes with fewer false positives.

Use wp-performance to investigate and improve WordPress performance from the backend, without a browser UI. It supports measurement-first diagnosis for slow frontend requests, admin pages, REST routes, and WP-Cron, with guidance on WP-CLI profile/doctor, Query Monitor via REST headers, Server-Timing, database queries, autoloaded options, object caching, cron, and remote HTTP calls.

wp-abilities-api helps you register WordPress abilities and categories in PHP, expose them through wp-abilities/v1, and consume them with @wordpress/abilities. Use this wp-abilities-api skill for backend development when you need reliable install, usage, and guide steps for core, plugin, theme, or mu-plugin workflows.

Use the wp-interactivity-api skill to build or debug WordPress Interactivity API features in frontend development. It helps with data-wp-* directives, @wordpress/interactivity store/state/actions, viewScriptModule integration, hydration, and directive behavior, with practical guidance for install, usage, and repo-specific troubleshooting.

The wp-rest-api skill helps you build, extend, and debug WordPress REST endpoints with less guesswork. Use it for route registration, permission_callback and auth checks, schema and argument validation, response shaping, register_rest_field/register_meta, and exposing CPTs or taxonomies via show_in_rest. It is a practical wp-rest-api guide for API Development in plugins, themes, and mu-plugins.

The wp-plugin-development skill helps you build, refactor, and harden WordPress plugins with less guesswork. It covers plugin structure, hooks, activation/deactivation/uninstall, admin settings, data storage, cron jobs, and security guardrails. Use it as a wp-plugin-development guide for Backend Development tasks and existing codebases.

wordpress-router is a WordPress triage skill that classifies a repo fast and routes agents to the right workflow before edits. It helps with plugins, classic themes, block themes, Gutenberg, WordPress core checkouts, and full site repos, making wordpress-router useful for Agent Orchestration.

The woocommerce skill helps you integrate with WooCommerce stores through the REST API for products, orders, customers, webhooks, and custom extensions. It is best for woocommerce for Backend Development, with practical woocommerce guide steps for setup, authentication, endpoint patterns, and safer API workflows.

The exploiting-insecure-deserialization skill helps authorized penetration testers identify serialized inputs, match Java, PHP, Python, and .NET targets, and validate exploitability safely. It includes workflow guidance, detection cues, and tool references for focused testing.

The wp-block-development skill helps you create, update, and debug WordPress Gutenberg blocks with less guesswork. Use it for block.json metadata, register_block_type(_from_metadata), attributes and serialization, supports, dynamic rendering, deprecations, and build tooling. It is especially useful for Frontend Development tasks that affect editor and frontend parity.