skilld
All skills
automattic avatar

/wp-abilities-api

@95e374f official
by automatticautomattic/agent-skills211 stars
37

Use when working with the WordPress Abilities API (wp_register_ability, wp_register_ability_category, /wp-json/wp-abilities/v1/*, @wordpress/abilities) including defining abilities, categories, meta, REST exposure, and permissions checks for clients.

Ask your Agent

Use this Skill: https://skilld.dev/gh/automattic/agent-skills/wp-abilities-api

This session only. Nothing lands on disk.

referencesrest-api.md

≈95 tokens on demand. Your agent reads this file only when SKILL.md points to it.

REST API quick guide (wp-abilities/v1)

The Abilities API exposes endpoints under the REST namespace:

  • wp-abilities/v1/abilities
  • wp-abilities/v1/categories

Debug checklist:

  • Confirm the route exists under wp-json/wp-abilities/v1/....
  • Verify the ability/category shows in REST responses.
  • If missing, confirm meta.show_in_rest is enabled for that ability.

Source: SKILL.md on GitHub

Third-party checks

No alerts17d4 checks · Risk SAFE
  • Gen Agent Trust Hub17d

    The skill is safe and follows WordPress development best practices. It utilizes official WordPress APIs and provides security recommendations such as implementing permission callbacks and namespacing IDs.

  • Socket17d

    No alerts

  • Snyk17d

    Risk: LOW · No issues

  • Runlayer7mo

    2/3 files flagged

Provenance

Signed by skilld at 95e374f. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 5 months ago.

Dormantupdated 9 months ago

Capability

Other metadata
compatibility
Targets WordPress 6.9+ (PHP 7.2.24+). Filesystem-based agent with bash + node. Some workflows require WP-CLI.

Topics

  • wordpress
  • abilities-api
  • rest-api
  • php
  • javascript
  • permissions
  • wp-cli

README badge

README badge for automattic/agent-skills/wp-abilities-api

What it does

Registers and exposes WordPress abilities (permissions/capabilities) via PHP hooks and REST endpoints, enabling client-side permission checks through the @wordpress/abilities library. Targets WordPress 6.9+ and handles ability registration, categorization, REST exposure, and consumption in JavaScript.

Generated from the current SKILL.md.

Frequently asked

What WordPress versions does this skill support?
WordPress 6.9+ with PHP 7.2.24+. For earlier versions, you may need the Abilities API as a separate plugin or package rather than relying on core.
Do I need WP-CLI to use this skill?
Some workflows require WP-CLI, but it is not universally required. Basic ability registration and REST exposure can work without it.
How do I make an ability visible to JavaScript clients?
Set `meta.show_in_rest: true` when registering the ability in PHP, then consume it on the client side using the `@wordpress/abilities` package.
Can I use this skill for WordPress core work, or only plugins and themes?
The skill works for core, plugins, and themes. Check the target WordPress version and whether Abilities API is expected from core or as a plugin before starting.
What should I do if an ability is registered but doesn't appear in the REST API?
Verify that `meta.show_in_rest` is enabled, the registration code is running on the correct hook, and the ability ID and category are correctly set. Check REST endpoints under `wp-abilities/v1` directly to confirm exposure.

Generated from the current SKILL.md. These answers refresh after source changes.