WordPress Security Checklist

Static site and printable checklist for hardening WordPress—built with Jekyll, aligned with the GitHub Pages stack (github-pages gem). Live site: https://wpsecuritychecklist.org

---

Sobre (pt-BR)

Lista de ações para melhorar a segurança da sua instalação WordPress. O site é gerado com Jekyll e publicado no GitHub Pages. Para rodar localmente: bundle install e bundle exec jekyll serve. Conteúdo do checklist nos arquivos items*.md; textos da interface em _data/strings.yml.

---

Repository layout

Area	Location
Checklist (EN / pt / es / ja)	items.md, items.br.md, items.es.md, items.ja.md
UI strings (nav, hero, blog labels, …)	_data/strings.yml
English homepage (/)	root-index.html (permalink /, includes home.html)
Localized homepages	br/index.html, es/index.html, ja/index.html
Blog posts	_posts/ — set language: en (or br, es, ja) in front matter
Layouts & includes	_layouts/, _includes/
Styles	css/main.scss → _sass/
Scripts	js/script.js (checklist checkboxes, theme toggle)
Site config	_config.yml (languages, checklist_last_updated, …)
Schema.org checklist data	_data/checklist_schema.yml, generated by scripts/sync-checklist-schema.py

Locales are listed in _config.yml under languages and must stay in sync with strings.yml and the items.* / index files you care about.

---

AI agent skill

The checklist is also available as an agent skill for Claude Code, Codex, Cursor, and other AI coding agents. It can audit a WordPress site against the checklist or guide you through each item. See WP-Security-Checklist/skill for installation and usage.

---

Requirements

• Ruby 3.3+ (GitHub Pages currently uses 3.3.4; see .ruby-version and Pages dependency versions)
• RubyGems (install RubyGems if needed)
• Bundler 2.x: gem install bundler (once per machine, if bundle is missing)

Jekyll is pulled in via the github-pages gem—use Bundler with the committed Gemfile.lock so local builds match production.

---

Local preview

git clone https://github.com/WP-Security-Checklist/website.git
cd website
bundle install
bundle exec jekyll serve

Open the URL Jekyll prints (usually http://localhost:4000). Edit files; the server reloads on change.

Build only (writes to _site/):

bundle exec jekyll build

---

Contributing

1. Fork the repository and create a branch for your change.
2. Checklist wording or new items: edit the appropriate items*.md (keep the same structure: headings, <label><input type="checkbox" data-item-id="…" />…</label> lines). Every locale must have the same item IDs in the same order. Then run python3 scripts/sync-checklist-schema.py, which regenerates the checklist data and fails if the locales differ. The skill follows these files; after adding an item, sync the skill and add its audit entry there.
3. Translations / UI copy: update _data/strings.yml for the matching code (en, br, es, ja).
4. Layout or styling: _layouts/, _includes/, _sass/, or css/main.scss.
5. Open a Pull Request when ready.

More on collaboration: GitHub Docs — Pull requests.

---

License

See LICENSE (GNU GPL v2).