The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes npx @wp-playground/cli@latest to download and execute the official command-line interface for WordPress Playground from the npm registry. This is the standard delivery mechanism for this developer tool from the verified author.
[DYNAMIC_EXECUTION]: The WordPress Blueprint system, as documented in references/blueprints.md, supports a runPHP step for executing inline PHP code and a writeFile step for filesystem modifications. These capabilities are intended features of the WordPress Playground environment to facilitate scripted setups and automated testing.
[INDIRECT_PROMPT_INJECTION]: The skill allows the agent to ingest configuration from external sources through the --blueprint=<url> parameter. This creates an attack surface where a maliciously crafted remote blueprint could specify unauthorized PHP code execution or plugin installations within the virtualized instance.
Ingestion points: Remote blueprint URLs in the run-blueprint and server commands (SKILL.md).
Boundary markers: The skill does not define specific delimiters for external blueprint content; it assumes the provided URL is a valid and trusted JSON recipe.
Capability inventory: The environment supports arbitrary PHP execution (runPHP), filesystem operations (writeFile, applyPatches), and network operations (CLI tools).
Sanitization: The skill provides instructions for the agent to use the tool as designed, relying on the source of the blueprint being trustworthy.
[COMMAND_EXECUTION]: The skill provides several shell commands for managing local development environments, including starting servers and building site snapshots. These commands are typical for the tool's primary purpose of local WordPress development and debugging.

wp-playground