Skills

Public AI agent skills for WordPress development, JavaScript modernization, Azure infrastructure, architecture documentation, and pre-launch security audits.

Available Skills · Related Skills · Install · Usage · Invocation Strategy · Skill Notes

Available Skills

Skill	Purpose
add-apim-api	Scaffold a new API in Azure API Management with Bicep infrastructure.
browser-native	Audit JavaScript dependencies and identify packages replaceable by modern browser/runtime native APIs.
wp-cli-local	Run WP-CLI commands against Local by Flywheel sites on macOS.
wp-pcp-local	Run the WordPress Plugin Check (PCP) against Local by Flywheel sites on macOS.
prepare-wordpress	Scaffold or update a WordPress project with dev tooling, coding standards, testing, and i18n support.
wp-bump	Bump a WordPress plugin version and update related release metadata.
document-architecture	Create, improve, or audit repository architecture and concept documentation.
pre-launch-security-audit	Run an evidence-backed security and abuse-resistance review before an application launch.

Related Skills (other repositories)

These live in their own repositories and install from there, not from soderlind/skills:

Skill	Purpose	Install
use-just-bash-for-scripts	Steer the agent to dry-run generated or untrusted shell scripts through just-bash before touching the real host.	npx skills add soderlind/just-bash-runner

Install

Install a skill globally with npx skills add:

npx skills add soderlind/skills --skill add-apim-api -g
npx skills add soderlind/skills --skill wp-cli-local -g
npx skills add soderlind/skills --skill wp-pcp-local -g
npx skills add soderlind/skills --skill prepare-wordpress -g
npx skills add soderlind/skills --skill wp-bump -g
npx skills add soderlind/skills --skill browser-native -g
npx skills add soderlind/skills --skill document-architecture -g
npx skills add soderlind/skills --skill pre-launch-security-audit -g

Install all detected agent integrations without prompts:

npx skills add soderlind/skills --skill add-apim-api -g --all
npx skills add soderlind/skills --skill wp-cli-local -g --all
npx skills add soderlind/skills --skill wp-pcp-local -g --all
npx skills add soderlind/skills --skill prepare-wordpress -g --all
npx skills add soderlind/skills --skill wp-bump -g --all
npx skills add soderlind/skills --skill browser-native -g --all
npx skills add soderlind/skills --skill document-architecture -g --all
npx skills add soderlind/skills --skill pre-launch-security-audit -g --all

Preview the skills available from this repository:

npx skills add soderlind/skills --list

List installed skills:

npx skills list -g

Update a skill:

npx skills update add-apim-api -g
npx skills update wp-cli-local -g
npx skills update wp-pcp-local -g
npx skills update prepare-wordpress -g
npx skills update wp-bump -g
npx skills update browser-native -g
npx skills update document-architecture -g
npx skills update pre-launch-security-audit -g

Remove a skill:

npx skills remove add-apim-api -g
npx skills remove wp-cli-local -g
npx skills remove wp-pcp-local -g
npx skills remove prepare-wordpress -g
npx skills remove wp-bump -g
npx skills remove browser-native -g
npx skills remove document-architecture -g
npx skills remove pre-launch-security-audit -g

Usage

After installation, ask your AI agent for the workflow you want. The matching skill should be selected automatically.

Example prompts:

Add a new API to Azure API Management for my backend service.
Run wp-cli on my Local site and list plugins.
Prepare this project for WordPress plugin development.
Bump this WordPress plugin to 1.2.3.
Scan this JavaScript project for dependencies that can be replaced by native browser APIs.
Document the architecture of this repository for new contributors.
Run a pre-launch security audit on this application.

Invocation Strategy

Use model-invoked skills when autonomous triggering is important or when one skill should call another.

Use user-invoked skills when you want zero context load and explicit manual control.

When many user-invoked skills accumulate, add a lightweight router skill that maps tasks to the right skill so you do not rely on memory.

Skill Notes

add-apim-api

Use this to scaffold a new API in Azure API Management with Bicep infrastructure.

Prerequisites:

• Azure CLI with Bicep extension
• Existing APIM infrastructure project
• Access to the target Azure subscription

Example prompt:

Add a speeches-api to APIM with backend at https://api.example.com/speeches

The skill guides you through gathering requirements, creating Bicep files, and wiring up the API.

wp-cli-local

Use this when working with WordPress sites in Local by Flywheel.

Prerequisites:

• macOS
• Local by Flywheel installed
• WP-CLI installed and available in PATH
• The target Local site is running

The skill always routes WP-CLI through its bundled wrapper:

bash skills/wp-cli-local/scripts/wp --list

wp-pcp-local

Use this to run the WordPress Plugin Check (PCP) against a plugin on a Local by Flywheel site.

Prerequisites:

• macOS
• Local by Flywheel installed
• WP-CLI installed and available in PATH
• The Plugin Check plugin installed and activated on the target site
• The target Local site is running

The skill routes Plugin Check through its bundled wrapper, auto-detecting the site and plugin slug from the current directory:

bash skills/wp-pcp-local/scripts/pcp my-plugin

prepare-wordpress

Use this to set up or refresh a WordPress project with common development tooling.

Prerequisites:

• Node.js 18+
• Composer 2+
• PHP 8.3+
• git
• WP-CLI for i18n commands

Preview the setup plan before changing a project:

node skills/prepare-wordpress/scripts/plan_setup.mjs --dry-run

Apply selected safe setup phases:

node skills/prepare-wordpress/scripts/plan_setup.mjs --apply --only=init,composer,config

wp-bump

Use this for WordPress plugin releases. It updates existing version fields, changelog entries, build outputs, and test checks according to the target project.

Example prompt:

Run wp-bump for version 1.2.3.

The skill does not create commits, tags, or releases unless you explicitly ask your agent to do so.

browser-native

Use this to scan JavaScript/Node.js dependencies and find packages that can be replaced with built-in APIs (fetch, URL, structuredClone, crypto.randomUUID, Intl, etc.).

Run the local scanner directly:

node skills/browser-native/scripts/cli.js .

Markdown report with before/after examples:

node skills/browser-native/scripts/cli.js . --md

document-architecture

Use this to create, improve, or audit repository architecture and concept documentation (architecture overviews, domain models, component boundaries, data/control flows, invariants, ADRs).

Example prompt:

Document the architecture of this repository so a new contributor can navigate it.

The skill labels current vs. proposed states explicitly and verifies claims against the repository before writing docs; see references/templates.md for document templates.

pre-launch-security-audit

Use this to run a stack-agnostic security and abuse-resistance review before launching an application (MVP, SaaS, AI app, public API, or mobile backend).

Example prompt:

Run a pre-launch security audit on this app before we go live.

The skill inspects the repository first, tests failure cases, and ends with a launch recommendation (block, conditional, or baseline met) rather than a compliance certification; see references/checklist.md for the control set.

Repository Layout

Each skill lives in its own folder under skills/:

skills/
  add-apim-api/
    SKILL.md
    references/
  browser-native/
    SKILL.md
    references/
    scripts/
  prepare-wordpress/
    SKILL.md
    references/
    scripts/
  wp-bump/
    SKILL.md
  wp-cli-local/
    SKILL.md
    scripts/
  wp-pcp-local/
    SKILL.md
    scripts/
  document-architecture/
    SKILL.md
    agents/
    references/
  pre-launch-security-audit/
    SKILL.md
    agents/
    references/

Licenses

• add-apim-api: MIT.
• wp-cli-local: MIT, as published in the original source repository.
• wp-pcp-local: MIT, as published in the original source repository.
• prepare-wordpress: GPL-2.0-or-later, as published in the original source repository.
• wp-bump: GPL-2.0-or-later, distributed with prepare-wordpress in the original source repository.
• browser-native: MIT, as published in the original source repository.
• document-architecture: MIT.
• pre-launch-security-audit: MIT.

AI Contribution Attribution

Assisted-by: GitHub Copilot:GPT-5.3-Codex