Ability Detail Panel
Open it by clicking any ability name on the Report or Role matrix tab. Click All findings to go back.
Definition#
| Field | What it shows |
|---|---|
| Category | The category label and slug. Marked “(not registered)” if the category has since been removed. |
| Owner | The plugin, mu-plugin, theme or core component whose code defines the ability, or Unknown. |
| Defined in | The source file and line of the strongest piece of evidence (custom class, execute callback or permission callback). |
| Execute callback, Permission callback | The callables, as readable names. |
| Class | The custom ability_class, when one is used. |
| Listed | Yes, or “No, hidden from wp_get_abilities() but still runnable by name” when a filter hides it from listings. |
Annotations and exposure#
Each of Read-only, Destructive and Idempotent is shown as Yes, No or Not set. Public, REST API and MCP each show Yes or No plus where the value comes from: explicit, from public, default or set by core.
Permission check by role#
A table with one row per role: the result (Pass, Deny, Inconclusive or n/a), the reason when it is inconclusive, and how long the check took in milliseconds. Below it is the test input the auditor built from the input schema and whether it passed validation.
Findings#
Every finding for this ability with Why it matters, How to fix and a Documentation link. If nothing fired, the panel says “No rule flagged this ability.”
Schemas#
The input and output schemas, collapsible and pretty-printed. Older audits keep only a summary of each schema to save space; open the latest audit for the full schema.