Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/talktoyourblog-com/plugin-editor/archive/refs/heads/main.zip
TalkToYourBlog Plugin Editor
Lets an AI app build its own WordPress plugins — never an existing one.
Part of TalkToYourBlog — manage your WordPress blog by talking to Claude, ChatGPT, Cursor, Grok and other AI apps.
What this is
TalkToYourBlog connects an AI app to a WordPress site over WordPress's own REST API — no plugin required for that. What the REST API can't reach is plugin code: PHP, CSS and JS files. This optional companion plugin adds exactly that, through nine WordPress Abilities (the same wp-abilities/v1 mechanism plugins like Rank Math or AIOSEO use).
On purpose, it never hands the AI the whole wp-content/plugins folder — not even itself. It can only create and work inside plugin folders of its own, each prefixed ai- (e.g. ai-my-widget). Every other plugin stays off limits.
- create-plugin — a new
ai-*plugin, seeded with a minimal but complete skeleton (a main file with a valid plugin header,includes/hooks.phpto build on,uninstall.php) instead of an empty folder. - list-plugins / list-files / get-file — see what exists and read it back, with a content hash so a later edit can detect it changed in between.
- update-file — create or edit a PHP/CSS/JS file, refused if the new content fails a syntax check.
- upload-image — JPG/PNG/GIF/WebP from base64, bytes checked against the claimed extension; SVG is refused since it's markup, not a picture.
- delete-file — text files are snapshotted first, so a deletion can be undone.
- list-revisions / restore-revision — every earlier version of a file, one call away.
This never activates anything. WordPress only lists a folder as a plugin once it has a PHP file with a valid header, and only runs it once a site admin activates it from the Plugins screen — exactly like a plugin uploaded by hand.
Why it's safe to install
Every file path is resolved and checked against the plugins directory, then against an ai-* folder it must start inside — .., an absolute path, a symlink pointing elsewhere, or a folder name that doesn't start with ai- is refused before anything is touched. The plugin cannot read, write or delete a single byte of any other plugin, including itself.
Install
Download the latest release, upload the zip from Plugins → Add New → Upload Plugin, and activate it. There's no settings screen — the abilities register themselves and become callable by anything authenticated to the site with the edit_plugins capability (administrators, by default).
Full documentation
See readme.txt for the complete FAQ, privacy notes and changelog (same format WordPress.org plugin pages use).
Made by TalkToYourBlog · also see Theme Editor and Event Calendar