Governed ability
Create block
aafm/create-block Guarded write
Creates a reusable block (published immediately). Its markup is sanitized, and the author is always the agent. Requires the publish-posts capability.
How it is governed
The same model as every ability in the plugin, stated for this one.
- Off until you enable it
Like every ability, Create block ships switched off. You turn it on one at a time, and an update never widens access on its own.
- Guarded write
Writes stay conservative, and the plugin re-checks the capability before the call runs.
- Capability gated
A connection only sees Create block if the user you connected can run it, and the plugin checks that capability again before it executes.
- Every call audited
The call is written to the log in your own database, denials included, with the argument keys but never the values.
See it in action
An illustrative run. Your real calls and data stay on your own site.
Try it with a prompt
Example requests you could paste to your agent.
Create a reusable block called Newsletter CTA with a heading and a signup paragraph.
Save this footer notice as a new synced pattern named Holiday Hours.
Make a reusable block titled Author Bio from the markup I give you.
These are illustrative example prompts. The agent runs them as the user you connected, checked against that user's capabilities and written to your audit log.
Frequently asked
Short answers for Create block.
Is the new block a draft or live?
It is published immediately as a reusable block. Its markup is sanitized on the way in, and the author is always recorded as the agent user.
What stops it from storing unsafe markup?
The block markup is sanitized before it is saved, so it cannot smuggle in arbitrary scripts. Creating a block also requires the publish-posts capability and is off until an admin enables it.
Governed by default, from the first call.
Create block is off until you enable it, scoped to the user you connect, and logged like everything else. Turn on only what you need.
Every ability off until you enable it, capability-gated on every call.