AI Ability · destructive

nibwp/execute-php

A governed, destructive action for wordpress — gated behind explicit scopes, a required confirmation, and the audit log.

Overview

What execute-php does

nibwp/execute-php is a destructive ability: it removes or rewrites data, so it only runs with an explicit confirmation and the right scope, and every call is recorded in the audit log.

Parameters

NameTypeRequiredDescription
idstringrequiredID of the object to act on.
confirmbooleanrequiredMust be true to proceed.
forcebooleanoptionalSkip trash and remove permanently.

Example call

tool: "nibwp/execute-php" args: { id: "512", confirm: true }
200 { ok: true, id: 512 }

What it can do

  • Remove or rewrite data with explicit scope
  • Gated behind a required confirmation flag
  • Every call recorded in the audit log
  • Reversible where the platform supports trash
Safety

Powerful, but governed

Confirmation gate

Requires an explicit confirm flag before it runs.

Audited

Each call is logged with status, latency, user and IP.

Rate limited

Per-token throttling stops runaway bulk operations.

Scoped tokens

Grant this tool only to the agents that should have it.

Related

Abilities that pair with it

FAQ

This ability, answered

What does it return?

A structured confirmation with the affected ID and the action taken.

Is it logged?

Always — every call appears in the audit log with timing and the calling user.

Can I restrict it?

Yes — enable or disable it per token and restrict by category, post type, rate and IP.

Is it reversible?

Where the platform supports trash, yes — and the confirm flag prevents accidental runs.

See execute-php run on a live site.

Book a demo and watch an agent call this ability through NibWP.