block-theme-audit

Audits WordPress block theme repositories for missing files, placeholders, and escaping issues.

Updated Jul 22, 2026
One-click install
npx skills add https://github.com/lightspeedwp/spotlight-theme-2026 --skill block-theme-audit-lightspeedwp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: block-theme-audit
Source: https://github.com/lightspeedwp/spotlight-theme-2026/tree/main/.agents/skills/block-theme-audit
Command: npx skills add https://github.com/lightspeedwp/spotlight-theme-2026 --skill block-theme-audit-lightspeedwp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? WordPress block theme repositories accumulate structural problems during development: missing required files, unreplaced placeholder tokens, unescaped PHP output, invalid theme.json settings, and accessibility gaps. Manually checking all of these before shipping is slow and error-prone. ## Core Features & Use Cases - Required File Verification: Confirms the presence of style.css, theme.json, functions.php, templates, parts, style variations, and documentation files. - Placeholder and Quality Scanning: Detects unreplaced {{TOKEN}} placeholders, validates theme.json schema and version, and checks style variation colour slugs. - PHP Security and Accessibility Checks: Flags unescaped echo statements, missing text domains, direct superglobal output, heading hierarchy problems, and missing skip links. - Use Case: Before merging a pull request on a block theme rebuild, run the audit to produce a Markdown report of passing checks, warnings, and errors, plus a follow-up task list for actionable findings. ## Quick Start Audit the WordPress block theme in this repository and save the report to .github/reports/ with a follow-up task list.

Frequently Asked Questions about block-theme-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a WordPress block theme before release?▼

Run the audit against the theme root directory. It checks required files like style.css, theme.json, and templates, scans for placeholder tokens, validates theme.json, and reviews PHP escaping and accessibility, then writes a Markdown report.

What files does a WordPress block theme require?▼

The audit checks for style.css, theme.json, functions.php, templates/index.html, parts/header.html, parts/footer.html, styles/light.json, styles/dark.json, CHANGELOG.md, README.md, and AGENTS.md.

Does the block theme audit modify my theme files?▼

No, the audit is advisory only and makes no destructive changes. It surfaces findings in a report and a follow-up task list so a human can decide what to fix.

What PHP security issues does the theme audit detect?▼

It flags echo statements without escaping wrappers, translation functions missing the text domain, and direct superglobal output in functions.php, inc/**/*.php, and patterns/**/*.php.

Why does theme.json validation fail in a block theme?▼

Common causes include a missing $schema property, a version value other than 3, colour palette slugs inconsistent with style variations, and deprecated properties, all of which the audit flags.