All skills
wordpress avatar

/wp-plugin-directory-guidelines

@20324d2 official
by wordpresswordpress/agent-skills2.2k stars
327

Use when reviewing WordPress plugins for GPL compliance, checking license headers or compatibility, evaluating upsell/freemium/trialware patterns, validating plugin naming or trademark rules, checking plugin slugs, understanding why a plugin was rejected from WordPress.org, or answering any question about the 18 WordPress.org Plugin Directory guidelines — even if the user doesn't mention 'guidelines' explicitly.

Use this Skill: https://skilld.dev/gh/wordpress/agent-skills/wp-plugin-directory-guidelines

This session only. Nothing lands on disk.

SKILL.md

≈112 tokens always: the name and description. ≈1.4k when used: this file. ≈11k more on demand in 3 files.

Overview

Authoritative reference for the 18 WordPress.org Plugin Directory guidelines. Covers GPL licensing, plugin naming/trademark rules, trialware restrictions, and all other submission requirements.

When to use

Use this skill when you need to:

  • Review a WordPress plugin for compliance with the WordPress.org Plugin Directory guidelines
  • Check GPL license compatibility for a plugin or its bundled libraries
  • Verify license headers in plugin files
  • Identify common guideline violations before submission
  • Answer questions about what is or is not allowed on WordPress.org
  • Evaluate premium/upsell flows, license checks, or freemium positioning
  • Review "teaser" or "preview" UI for trialware violations

Inputs required

  • Plugin source code (or specific files to review)
  • Optional: plugin readme and plugin header metadata for naming and license checks

Procedure

  1. Check the plugin's license header against the Valid License Headers section below.
  2. Walk through the 18 Guidelines checklist, paying special attention to Guidelines 1, 4, 5, 7, 8, and 17.
  3. Confirm trialware/freemium compliance using the checklist in guideline-review-checklist.md (Guideline 5 section).
  4. For bundled third-party code, verify license compatibility against GPL-Compatible Licenses (Quick) below.
  5. Flag matches from Common GPL Violations (Quick) below.
  6. For edge cases, consult the detailed references and the GNU GPL FAQ.

18-Guideline Review Checklist

Use the detailed, per-guideline checklist in guideline-review-checklist.md. Load this reference file only when a full guideline audit is requested.

GPL Compliance (Guideline 1 in Detail)

Use gpl-compliance.md for full license tables, compatibility nuances, and examples. Keep this inline section as a quick decision aid.

Verification (Licensing)

  • Every licensing-related issue must cite Guideline 1 and include the file path and exact license string.
  • Confirm compatibility claims against GPL-Compatible Licenses (Quick) and escalate ambiguous licenses.

Failure modes (Licensing)

  • If a license is not clearly GPL-compatible, do not guess. Check the GNU license list.
  • For dual-license packages, verify both licenses and redistribution terms.

Quick Reference: WordPress GPL Requirements

  • WordPress is GPLv2 or later.
  • Plugins distributed on WordPress.org must be 100% GPL-compatible (code and assets).
  • Include a valid License: header and License URI: in the main plugin file.
  • Do not add restrictions that conflict with GPL freedoms.

Valid License Headers

GPL Versions Summary

Version Year Key Addition
GPLv1 1989 Base copyleft: share-alike for modifications
GPLv2 1991 "Liberty or death" clause (Section 7), clearer distribution terms
GPLv3 2007 Anti-tivoization, explicit patent grants, compatibility provisions

WordPress uses GPLv2 or later, meaning plugins can use GPLv2, GPLv3, or "GPLv2 or later".

For full license texts, see:

License Compliance Checklist

When reviewing a plugin, verify:

  • Main plugin file has a valid License: header (e.g., GPL-2.0-or-later, GPL-2.0+, GPLv2 or later)
  • Main plugin file has a License URI: header pointing to the GPL text
  • If bundled libraries exist, each has a GPL-compatible license
  • No "split licensing" (e.g., code GPL but premium features proprietary)
  • No additional restrictions beyond what GPL allows
  • No clauses restricting commercial use, modification, or redistribution
  • No obfuscated code (violates the spirit of source code availability)

Valid License Headers for WordPress Plugins

License: GPL-2.0-or-later
License URI: https://www.gnu.org/licenses/gpl-2.0.html
License: GPL-3.0-or-later
License URI: https://www.gnu.org/licenses/gpl-3.0.html
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

GPL-Compatible Licenses (Quick)

  • Safe defaults: GPL-2.0-or-later, GPL-3.0-or-later.
  • Commonly accepted permissive families: MIT/Expat, BSD, ISC, zlib, Boost.
  • Conditional compatibility requires care: Apache-2.0 and MPL-2.0 (verify usage context).
  • For full accepted and rejected identifiers, use gpl-compliance.md.

Common GPL Violations (Quick)

  • Split licensing that restricts distributed code.
  • Obfuscated or non-corresponding source distribution.
  • Restrictive clauses (non-commercial, no-resale, forced backlink).
  • Bundling GPL-incompatible libraries or assets.

Plugin Naming Rules (Guideline 17)

Use naming-rules.md for full trademark lists, slug blocks, and naming examples. Keep this inline checklist for quick screening.

Naming Checklist (Quick)

  • Name is not a placeholder and has at least 5 alphanumeric characters.
  • Header name and readme name match.
  • Name is specific and function-related; avoid keyword stuffing.
  • Trademark/project names appear only after connectors like for, with, using, and.
  • No banned/discouraged terms or trademark portmanteaus.
  • Slug is lowercase, hyphenated, <= 50 chars, and avoids blocked terms.

Source: SKILL.md on GitHub

No alerts16d3 checks · Risk SAFE
  • Gen Agent Trust Hub16d

    This skill is a security auditing tool for WordPress plugins, providing checklists for GPL compliance, naming rules, and directory guidelines. It is designed to help identify potential violations such as obfuscated code or unauthorized data collection. No malicious behavior was detected within the skill's instructions or references.

  • Socket16d

    No alerts

  • Snyk16d

    Risk: LOW · No issues

Signed by skilld at 20324d2. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 days ago.

Activeupdated 3 months ago
compatibility
Targets WordPress 7.0+ (PHP 7.4.0+).
  • wordpress
  • gpl
  • licensing
  • plugin-compliance
  • trademark
  • wordpress-org
  • php
  • plugin-directory

README badge

README badge for wordpress/agent-skills/wp-plugin-directory-guidelines

Authoritative reference for the 18 WordPress.org Plugin Directory guidelines covering GPL licensing, plugin naming, trademark rules, trialware restrictions, and submission requirements. Use this skill to audit plugins for compliance before WordPress.org submission, verify GPL header validity and license compatibility, or answer questions about what is allowed in the plugin directory.

Generated from the current SKILL.md.

Does this skill cover all 18 WordPress.org Plugin Directory guidelines?
Yes. The skill is an authoritative reference for all 18 guidelines, with detailed checklists and specific procedures for GPL compliance, naming rules, trialware restrictions, and submission requirements.
What license headers does WordPress.org accept?
WordPress.org accepts GPL-2.0-or-later, GPL-3.0-or-later, or GPLv2/GPLv3 or later formats, with a corresponding License URI header pointing to the GPL text.
Does this help identify why a plugin was rejected from WordPress.org?
Yes. The skill guides you through the 18-guideline checklist to identify common violations (GPL incompatibility, trialware patterns, trademark issues, obfuscation) that typically cause rejections.
Can I use MIT or BSD licensed libraries in my WordPress plugin?
Yes, MIT, BSD, ISC, zlib, and Boost are commonly accepted as GPL-compatible. For conditional licenses like Apache-2.0 or MPL-2.0, the skill provides detailed compatibility guidance.
What counts as trialware and violates the guidelines?
The skill includes a trialware checklist covering premium upsells, freemium flows, license checks, and teaser UI. It flags patterns that restrict core functionality based on payment or licensing.

Generated from the current SKILL.md. These answers refresh after source changes.