wp-rest-api

Malicious tool definition detected

Tool: SKILL.md Description: --- name: wp-rest-api description: "Use when building, extending, or debugging WordPress REST API endpoints/routes: register_rest_route, WP_REST_Controller/controller classes, schema/argument validation, permission_callback/authentication, response shaping, register_rest_field/register_meta, or exposing CPTs/taxonomies via show_in_rest." compatibility: "Targets WordPress 6.9+ (PHP 7.2.24+). Filesystem-based agent with bash + node.

Malicious tool definition detected

Tool: references/authentication.md Description: # Authentication (summary) ## Cookie authentication (in-dashboard / same-site) - Standard for wp-admin and theme/plugin JS.

Malicious tool definition detected

Tool: references/custom-content-types.md Description: # Custom Content Types (summary) ## Custom post types - Set `show_in_rest => true` in `register_post_type()` to expose in `wp/v2`.

Malicious tool definition detected

Tool: references/discovery-and-params.md Description: # Discovery and Global Parameters (summary) ## API discovery - REST API root is discovered via the `Link` header: `rel="https://api.w.org/"`.

Malicious tool definition detected

Tool: references/responses-and-fields.md Description: # Responses and Fields (summary) ## Do not remove core fields - Removing or changing core fields breaks clients (including wp-admin).

Malicious tool definition detected

Tool: references/routes-and-endpoints.md Description: # Routes and Endpoints (summary) ## Registering routes - Register routes on the `rest_api_init` hook with `register_rest_route( $namespace, $route, $args )`.

Malicious tool definition detected

Tool: references/schema.md Description: # Schema and Argument Validation (summary) ## JSON Schema in WordPress - REST API uses JSON Schema (draft 4 subset) for resource and argument definitions.