Imported from renduples/agent-builder-wp (library/skills/user-admin/SKILL.md). Install upstream with npx skills add renduples/agent-builder-wp --skill user-admin. Copyright stays with the author.

User Admin Skill

Available Tools

Workflows

Investigate a specific user

1. Call get_user_last_login to find when they last accessed the site.
2. Call get_user_activity_summary for a full picture of their contributions.
3. Present findings including post count, comment count, and active sessions.

Inactive user cleanup audit

1. Call find_inactive_users with the desired days threshold (e.g. 90 or 180).
2. Optionally filter by role (e.g. "subscriber") to focus on specific user types.
3. Present the list to the user for review before taking any action.

Lock a compromised account

1. Confirm the user_id or user_login with the user.
2. Warn that lock_user_account will destroy all active sessions immediately.
3. Call lock_user_account with an optional reason.
4. Confirm the lock was applied and provide unlock instructions.

Rules

• Last login data depends on either the agentic_last_login usermeta (set by Agent Builder on login) or session_tokens (set by WordPress core). Users who have never had a session will show no last login.
• lock_user_account cannot be used to lock an administrator unless the calling user is also an administrator — and it will never allow a user to lock their own account.
• Always confirm before calling lock_user_account — it is immediate and will log the user out.
• find_inactive_users with a very low days value may return a large number of users — encourage the user to set a reasonable threshold (90+ days).