WP Interactivity API

The agent is explicitly granted filesystem access and the ability to execute `bash` and `node` commands. This allows for arbitrary code execution, system manipulation, and potential compromise of the host environment.

compatibility: "Filesystem-based agent with bash + node."

The agent has access to `WP-CLI`, a powerful command-line interface for WordPress. This enables administrative actions such as managing users, plugins, themes, and the database, posing a significant risk for site compromise or data manipulation.

compatibility: "Some workflows require WP-CLI."

The skill involves generating and modifying PHP code (e.g., for `wp_interactivity_state` and `wp_interactivity_data_wp_context`). Combined with filesystem access, this capability could be abused to inject malicious PHP code into WordPress files, leading to backdoors or persistent compromise.

wp_interactivity_state( 'myPlugin', array( ... ));

The agent is expected to verify and potentially interact with build tools (`@wordpress/scripts`, webpack/vite). This involves executing `node` or `bash` commands, which could be exploited for resource abuse (e.g., infinite loops, excessive compilation) or to inject malicious build steps.

Verify the repo supports the required module build path: if it uses `@wordpress/scripts`, prefer its conventions. if it uses custom bundling, confirm module output is supported.