WordPress Security Checklist

Static site and printable checklist for hardening WordPress—built with Jekyll, aligned with the GitHub Pages stack (github-pages gem). Live site: https://wpsecuritychecklist.org

Sobre (pt-BR)

Lista de ações para melhorar a segurança da sua instalação WordPress. O site é gerado com Jekyll e publicado no GitHub Pages. Para rodar localmente: bundle install e bundle exec jekyll serve. Conteúdo do checklist nos arquivos items*.md; textos da interface em _data/strings.yml.

Repository layout

Area	Location
Checklist (EN / pt / es / ja)	`items.md`, `items.br.md`, `items.es.md`, `items.ja.md`
UI strings (nav, hero, blog labels, …)	`_data/strings.yml`
English homepage (`/`)	`root-index.html` (permalink `/`, includes `home.html`)
Localized homepages	`br/index.html`, `es/index.html`, `ja/index.html`
Blog posts	`_posts/` — set `language: en` (or `br`, `es`, `ja`) in front matter
Layouts & includes	`_layouts/`, `_includes/`
Styles	`css/main.scss` → `_sass/`
Scripts	`js/script.js` (checklist checkboxes, theme toggle)
Site config	`_config.yml` (`languages`, `checklist_last_updated`, …)
Schema.org checklist data	`_data/checklist_schema.yml`, generated by `scripts/sync-checklist-schema.py`

Locales are listed in _config.yml under languages and must stay in sync with strings.yml and the items.* / index files you care about.

AI agent skill

The checklist is also available as an agent skill for Claude Code, Codex, Cursor, and other AI coding agents. It can audit a WordPress site against the checklist or guide you through each item. See WP-Security-Checklist/skill for installation and usage.

Requirements

Ruby 3.3+ (GitHub Pages currently uses 3.3.4; see .ruby-version and Pages dependency versions)
RubyGems (install RubyGems if needed)
Bundler 2.x: gem install bundler (once per machine, if bundle is missing)

Jekyll is pulled in via the github-pages gem—use Bundler with the committed Gemfile.lock so local builds match production.

Local preview

git clone https://github.com/WP-Security-Checklist/website.git
cd website
bundle install
bundle exec jekyll serve

Open the URL Jekyll prints (usually http://localhost:4000). Edit files; the server reloads on change.

Build only (writes to _site/):

bundle exec jekyll build

Contributing

Fork the repository and create a branch for your change.
Checklist wording or new items: edit the appropriate items*.md (keep the same structure: headings, <label><input type="checkbox" data-item-id="…" />…</label> lines). Every locale must have the same item IDs in the same order. Then run python3 scripts/sync-checklist-schema.py, which regenerates the checklist data and fails if the locales differ. The skill follows these files; after adding an item, sync the skill and add its audit entry there.
Translations / UI copy: update _data/strings.yml for the matching code (en, br, es, ja).
Layout or styling: _layouts/, _includes/, _sass/, or css/main.scss.
Open a Pull Request when ready.

More on collaboration: GitHub Docs — Pull requests.

License

See LICENSE (GNU GPL v2).

WP-Security-Checklist/website

측정된 스타 증가

소개

README.md