{"id":3304,"date":"2026-10-07T17:15:49","date_gmt":"2026-10-07T11:45:49","guid":{"rendered":"https:\/\/bengaluru.wordcamp.org\/2026\/session\/beyond-the-boilerplate-building-high-quality-wordpress-plugins-with-ai\/"},"modified":"2026-10-07T17:15:49","modified_gmt":"2026-10-07T11:45:49","slug":"beyond-the-boilerplate-building-high-quality-wordpress-plugins-with-ai","status":"publish","type":"wcb_session","link":"https:\/\/bengaluru.wordcamp.org\/2026\/session\/beyond-the-boilerplate-building-high-quality-wordpress-plugins-with-ai\/","title":{"rendered":"Beyond the Boilerplate: Building High-Quality WordPress Plugins with AI"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">AI models can generate a functional WordPress plugin in seconds, but &#8220;functional&#8221; rarely means production-ready. Out of the box, AI tools frequently ignore WordPress Coding Standards (WPCS), miss crucial data sanitization, and write monolithic spaghetti code. If left unchecked, an AI-generated plugin is a security vulnerability waiting to happen.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This session is a deep dive into the rigorous quality control workflows required when building with AI. We will cover the exact prompt engineering techniques and human-in-the-loop review processes needed to force AI models to properly implement nonces, escape outputs, and write modular PHP that passes enterprise-grade security audits. Learn how to trade boilerplate coding for high-level system architecture while keeping your AI tools firmly on the rails of WordPress best practices.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Key Takeaways:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Identifying the most common security hallucinations and anti-patterns in AI-generated PHP.<\/li>\n\n<li>Prompt engineering techniques to strictly enforce WordPress data sanitization and output escaping.<\/li>\n\n<li>Automating WPCS compliance checks on AI-generated code.<\/li>\n\n<li>Building a bulletproof human-in-the-loop review process for AI output.<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-group wcblr-sesx-people is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"wcblr-sesx-peoplehead wp-block-paragraph\">\/\/ on_stage<\/p>\n\n\n\n<div class=\"wp-block-group wcblr-sesx-person is-layout-flow wp-block-group-is-layout-flow\">\n<figure class=\"wp-block-image size-full wcblr-sesx-personphoto\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"880\" src=\"https:\/\/i0.wp.com\/bengaluru.wordcamp.org\/2026\/files\/2026\/10\/wcblr-2026-speaker-nirbhay-singh-rao.jpg?resize=800%2C880&#038;ssl=1\" alt=\"\" class=\"wp-image-3302\" srcset=\"https:\/\/i0.wp.com\/bengaluru.wordcamp.org\/2026\/files\/2026\/10\/wcblr-2026-speaker-nirbhay-singh-rao.jpg?w=800&amp;ssl=1 800w, https:\/\/i0.wp.com\/bengaluru.wordcamp.org\/2026\/files\/2026\/10\/wcblr-2026-speaker-nirbhay-singh-rao.jpg?resize=273%2C300&amp;ssl=1 273w, https:\/\/i0.wp.com\/bengaluru.wordcamp.org\/2026\/files\/2026\/10\/wcblr-2026-speaker-nirbhay-singh-rao.jpg?resize=768%2C845&amp;ssl=1 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading wcblr-sesx-personname\"><a href=\"https:\/\/bengaluru.wordcamp.org\/2026\/speaker\/nirbhay-singh-rao\/\">Nirbhay Singh Rao<\/a><\/h3>\n\n\n\n<p class=\"wcblr-sesx-personrole wp-block-paragraph\">Full Stack Developer, Elementor<\/p>\n\n\n\n<p class=\"wcblr-sesx-personlink wp-block-paragraph\">Speaker profile<\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>AI models can generate a functional WordPress plugin in seconds, but &#8220;functional&#8221; rarely means production-ready. Out of the box, AI tools frequently ignore WordPress Coding Standards (WPCS), miss crucial data sanitization, and write monolithic spaghetti code. If left unchecked, an AI-generated plugin is a security vulnerability waiting to happen. This session is a deep dive [&hellip;]<\/p>\n","protected":false},"author":20620937,"featured_media":0,"template":"","meta":{"_wcpt_session_time":0,"_wcpt_session_duration":1800,"_wcpt_session_type":"session","_wcpt_speaker_id":[2514],"footnotes":""},"session_track":[],"session_category":[40],"class_list":["post-3304","wcb_session","type-wcb_session","status-publish","hentry","wcb_session_category-talk"],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pheRQg-Ri","session_date_time":{"date":"","time":""},"session_speakers":[{"id":"2514","slug":"nirbhay-singh-rao","name":"Nirbhay Singh Rao","link":"https:\/\/bengaluru.wordcamp.org\/2026\/speaker\/nirbhay-singh-rao\/"}],"session_cats_rendered":"Talk","_links":{"self":[{"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions\/3304","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions"}],"about":[{"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/types\/wcb_session"}],"author":[{"embeddable":true,"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/users\/20620937"}],"version-history":[{"count":0,"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/sessions\/3304\/revisions"}],"speakers":[{"embeddable":true,"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/speakers\/2514"}],"wp:attachment":[{"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/media?parent=3304"}],"wp:term":[{"taxonomy":"wcb_track","embeddable":true,"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/session_track?post=3304"},{"taxonomy":"wcb_session_category","embeddable":true,"href":"https:\/\/bengaluru.wordcamp.org\/2026\/wp-json\/wp\/v2\/session_category?post=3304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}