How do I install the Wordpress Workspace Preview Routing Debug skill?

Run npx skillmds@latest add automattic/wordpress-workspace-preview-routing-debug in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Wordpress Workspace Preview Routing Debug safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Wordpress Workspace Preview Routing Debug?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Wordpress Workspace Preview Routing Debug free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Wordpress Workspace Preview Routing Debug?

Automattic (@automattic) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Wordpress Workspace Preview Routing Debug by automattic

Name: Wordpress Workspace Preview Routing Debug
Author: Automattic

Wordpress Workspace Preview Routing Debug

Debug WordPress Workspace Agent preview, edit-mode, authentication, proxy, and URL-routing behavior across simple WordPress.com, Jetpack, and Atomic sites. Use when preview panels load blank pages, show the wrong URL, leak effective preview URLs, fail authentication, or behave differently by site type.

Automattic 53358a2 2 files · 2.9 KB Updated Sep 17, 2026

File contents

WordPress Workspace Preview Routing Debug

Use this skill for preview/auth/editor-mode problems in the WordPress Agent window or detached preview.

Workflow

Ground the report in the current code path.
- Inspect Sources/WordPressAgentPreviewURLResolver.swift, Sources/WordPressAgentWindowView.swift, Sources/WPCOMClient.swift, and relevant Sources/AppState.swift preview methods.
- Search with rg -n "preview|frame_nonce|jetpack_frame_nonce|unmapped|Atomic|cookie|requested|effective|private|proxy" Sources.
Preserve the preview trust rules.
- Show the requested user-facing URL in UI.
- Do not expose effective preview URLs, frame nonces, auth bootstrap URLs, or private preview details.
- Reject localhost and private-network URLs.
Check site type and mode.
- Simple WordPress.com, Jetpack, and Atomic sites can require different preview URL, unmapped-host, nonce, cookie, or read-access handling.
- Distinguish signed-out view, authenticated preview, and editor mode.
Check proxy and routing overrides.
- Inspect Sources/NetworkRoutingSettings.swift and the WordPress.com auth-cookie bootstrap in Sources/WPCOMClient.swift.
- The app has a developer setting to bypass the macOS system proxy for sandbox routing, but the preview cookie-bootstrap flow intentionally uses a one-off direct session because proxy routing has produced wp-login.php 200 responses with empty auth cookies.
- Keep normal API traffic aligned with the user's network setting unless the code path is specifically browser-cookie infrastructure.
Reproduce with focused signals.
- Prefer app logs, existing preview loading states, and targeted code inspection before inventing shell-only repros.
- Verify loading/preparation states, navigation updates, requested-vs-effective URL display, and mode switch behavior.
Keep comments where behavior is non-obvious.
- Proxy bypass, cookie bootstrap, nonce handling, and URL rewriting deserve concise code comments when changed.

Output

Lead with the failing route or trust boundary.
Include file references and the specific site/mode assumptions.
Recommend tests for public URL, same-site URL, preview URL, editor URL, internal navigation, and rejected private URL.

---name: wordpress-workspace-preview-routing-debugdescription: Debug WordPress Workspace Agent preview, edit-mode, authentication, proxy, and URL-routing behavior across simple WordPress.com, Jetpack, and Atomic sites. Use when preview panels load blank pages, show the wrong URL, leak effective preview URLs, fail authentication, or behave differently by site type.---# WordPress Workspace Preview Routing DebugUse this skill for preview/auth/editor-mode problems in the WordPress Agent window or detached preview.## Workflow1. Ground the report in the current code path. - Inspect `Sources/WordPressAgentPreviewURLResolver.swift`, `Sources/WordPressAgentWindowView.swift`, `Sources/WPCOMClient.swift`, and relevant `Sources/AppState.swift` preview methods. - Search with `rg -n "preview|frame_nonce|jetpack_frame_nonce|unmapped|Atomic|cookie|requested|effective|private|proxy" Sources`.2. Preserve the preview trust rules. - Show the requested user-facing URL in UI. - Do not expose effective preview URLs, frame nonces, auth bootstrap URLs, or private preview details. - Reject localhost and private-network URLs.3. Check site type and mode. - Simple WordPress.com, Jetpack, and Atomic sites can require different preview URL, unmapped-host, nonce, cookie, or read-access handling. - Distinguish signed-out view, authenticated preview, and editor mode.4. Check proxy and routing overrides. - Inspect `Sources/NetworkRoutingSettings.swift` and the WordPress.com auth-cookie bootstrap in `Sources/WPCOMClient.swift`. - The app has a developer setting to bypass the macOS system proxy for sandbox routing, but the preview cookie-bootstrap flow intentionally uses a one-off direct session because proxy routing has produced wp-login.php 200 responses with empty auth cookies. - Keep normal API traffic aligned with the user's network setting unless the code path is specifically browser-cookie infrastructure.5. Reproduce with focused signals. - Prefer app logs, existing preview loading states, and targeted code inspection before inventing shell-only repros. - Verify loading/preparation states, navigation updates, requested-vs-effective URL display, and mode switch behavior.6. Keep comments where behavior is non-obvious. - Proxy bypass, cookie bootstrap, nonce handling, and URL rewriting deserve concise code comments when changed.## Output- Lead with the failing route or trust boundary.- Include file references and the specific site/mode assumptions.- Recommend tests for public URL, same-site URL, preview URL, editor URL, internal navigation, and rejected private URL.

Frequently asked questions