Claude Skills by adityaarsharma

UAT (User Acceptance Testing) template + Playwright spec scaffolds for Gutenberg block plugins — insert via inserter, configure via InspectorControls, save post, verify frontend render, test inside reusable patterns + synced patterns, test transforms, test in Site Editor template context. Use when the user says "UAT for Gutenberg", "block plugin UAT", "test my block end-to-end".

UAT template + Playwright spec scaffolds for membership / LMS plugins (LearnDash, MemberPress, Restrict Content Pro, Paid Memberships Pro, LifterLMS, BuddyBoss) — registration, login, paywalled content access, drip schedules, course progress, certificate generation, subscription lifecycle. Use when the user says "LMS UAT", "membership plugin UAT", "test paywall", "course completion test".

UAT template + Playwright spec scaffolds for WooCommerce extensions — product creation, cart flows, checkout (incl. Block Checkout), order lifecycle, refund / partial refund, HPOS-aware queries, REST + Store API. Use when the user says "WooCommerce UAT", "test my Woo plugin", "checkout flow test", "Block Checkout".

Uninstall hygiene test for a WordPress plugin — verifies that deleting the plugin completely removes options, postmeta, custom tables, transients, scheduled crons, user meta, capabilities, and uploaded files. Use when the user says "uninstall test", "deactivation cleanup", "remove all data on uninstall", or before any release touching the activation/uninstall paths.

Update Orbit to the latest version. Pulls the latest from GitHub, refreshes every installed `/orbit-*` skill in place, and removes any deprecated entries. Zero questions, zero prompts. Use whenever the user says "update orbit", "upgrade orbit", "pull latest orbit", "refresh orbit skills", or has seen a new release on the Orbit repo. Safe to run repeatedly — if already on latest, exits cleanly.

User-flow / journey mapping for a WordPress plugin — measures click-depth to core features, detects setup wizards / onboarding, scores confusion (tabs × inputs × toggles), verifies analytics events fire on user actions, validates consent-mode (GDPR) compliance. Use when the user says "user flow", "click depth", "onboarding test", "first-time UX", "verify analytics events", "GDPR consent", or "test the new-user journey".

Verify a WordPress plugin meets the EU Cyber Resilience Act mandate (effective 2026) — every commercial WP plugin sold in the EU must have a published Vulnerability Disclosure Program (VDP). Checks for SECURITY.md / security.txt / public VDP page + contact channel + response SLA. Use when the user says "VDP", "vulnerability disclosure", "EU CRA", "cyber resilience act", "security.txt", or before launching any commercial plugin in the EU.

Compare two versions of the same WordPress plugin (typically v(N-1).zip vs v(N).zip) — diffs PHPCS errors, asset weight, function adds/removes, hook adds/removes, and sets up the visual baseline diff for the new version. Use when the user says "v1 vs v2", "before vs after release", "diff two zips", "what changed since the last release", or runs the regression-pass workflow.

Pixel-diff visual regression tests for a WordPress plugin's admin pages, frontend output, and admin colour-scheme variants. Catches unintended UI changes between releases. Includes responsive breakpoints (375 / 768 / 1440) and admin colour scheme matrix (default / midnight / coffee / etc.). Use when the user says "visual regression", "pixel diff", "screenshot diff", "responsive layout", "admin colors", "design refresh baseline".

Install WooCommerce Beta Tester on a Docker/InstaWP site, switch WooCommerce to the latest beta release, then run a full site health sweep. Trigger phrases — "woocommerce beta", "test woo beta", "orbit-woocommerce-beta-check", "beta tester woo", "switch woo to beta", "latest woo beta", "check beta release". Works against a live Sprout MCP-connected site or a local wp-env Docker site.

WordPress plugin database review. Use when reviewing WP plugin PHP code for database issues — $wpdb usage, autoload bloat, missing indexes, transient patterns, uninstall cleanup, dbDelta table creation. WordPress MySQL/PHP specific only. Do NOT give PostgreSQL, DynamoDB, or enterprise database advice — this is WordPress wpdb patterns.

WordPress plugin performance code review. Use when analyzing WP plugin PHP code for performance issues — slow hooks, N+1 DB queries, blocking assets, transient misuse, autoload bloat. READ SOURCE CODE ONLY. Do NOT analyze Kubernetes, Docker, Prometheus, APM, CDN configs, or cloud infrastructure — this is WordPress PHP performance only.

Thin wrapper around the official `WordPress/agent-skills` repo (Brandon Payton's wp-playground skill, January 2026). When invoked, ensures the WP core agent skill is installed via `npx openskills install WordPress/agent-skills`, and delegates Playground-related work to it. Use when the user says "wp-playground", "WordPress agent skill", "playground for AI", "openskills", or wants the AI agent to spin up WordPress in seconds for code-iteration testing.

WordPress plugin PHP source code security review. Use when auditing WP plugin files for vulnerabilities — XSS, CSRF, SQLi, privilege escalation, IDOR, nonce bypass, is_admin() misuse. READ SOURCE CODE ONLY. Do NOT run WPScan, Metasploit, or any attacker tools. Do NOT scan live URLs. This is a static code reviewer for WordPress PHP files.

WordPress plugin coding standards review. Use when reviewing WP plugin code for standards compliance — naming conventions, escaping, nonce usage, capability checks, i18n, hook registration patterns. THIS IS A CODE REVIEWER, NOT A SCAFFOLDING TOOL. Do NOT generate new plugin boilerplate. Read existing code and find standards violations.

Validate the contents of a WordPress plugin release zip — no dev artefacts (`.git/`, `.cursor/`, `.github/`, `.DS_Store`), no source maps, no `composer.json` / `package.json` (or strip dev deps), no forbidden functions in shipped code (`var_dump`, `phpinfo`, `error_reporting`), supply-chain audit on bundled vendor/. Use when the user says "validate zip", "zip hygiene", "dev files in zip", "before SVN submit", "check release zip".

Master dispatcher for Orbit — the WordPress plugin QA framework. Use when the user types "orbit", "/orbit", "orbit help", "orbit do X", or any unscoped Orbit request. Reads the user's intent, picks the right `/orbit-*` sub-skill, and invokes it. If the intent is ambiguous (e.g. "test my plugin"), surface the role-based menu (Dev / QA / PM / Designer / Release Ops). NEVER answer Orbit questions without first dispatching to a specialised skill — that is the whole point of this suite.