ActionPanel AI – Site Agent & Troubleshooter vs SPM by Marwan

ActionPanel AI is an AI assistant built into wp-admin that can create and edit WordPress content, troubleshoot problems, and carry out maintenance — all from a chat panel inside your dashboard. Instead of switching between the block editor, Site Health, plugin screens, settings pages, and docs, you describe what you want in plain English. ActionPanel AI reads the relevant parts of your site, proposes changes, and — with your approval — applies them. Create and manage content Posts and pages: Draft new posts and pages, rewrite or extend existing content, and edit block content directly. New drafts and edits are yours to review before anything goes live. Custom post types and fields: Create and update custom post types and custom fields on sites using Advanced Custom Fields (ACF) or JetEngine. Menus, categories, and tags: Build and reorganize navigation menus and manage categories, tags, and other taxonomy terms. Media: Add and organize items in the media library and set featured images. You can also share an image in chat for ActionPanel AI to use while it works. SEO: Update SEO titles, descriptions, canonical URLs, and social (Open Graph) metadata through your active SEO plugin — Yoast SEO, Rank Math, or All in One SEO. Site design: Adjust block templates, template parts, and global styles, or apply custom CSS to specific pages. Cloning: Duplicate an existing post or page as a draft to use as a starting point. Troubleshoot and maintain Site troubleshooting: Ask what might be broken, why a page is returning an error, why links are failing, or what to check after a site change. Performance checks: Review plugin bloat, autoloaded options, homepage assets, scheduled task backlogs, and other common causes of slow WordPress sites. Plugin and theme review: Find outdated, duplicated, inactive, or potentially risky plugins and themes, then get plain-language next steps. Site Health summaries: Turn WordPress Site Health, REST/runtime details, and maintenance signals into a prioritized explanation of what matters. WooCommerce checks: Review common store setup areas such as checkout pages, payment gateways, shipping zones, and basic configuration. Debug log help: When log reads are enabled, use sanitized excerpts from a readable WordPress debug log file to help explain errors and warnings. Guided maintenance actions: When write operations are enabled, ActionPanel AI can propose supported maintenance actions — such as clearing caches, flushing rewrite rules, running scheduled tasks, and updating allowlisted settings — and explain what they do before you approve them. Common tasks Use ActionPanel AI when you need to: Draft a new post or page or revise existing content. Update SEO titles and descriptions or fix metadata across your content. Build or reorganize a navigation menu, categories, or tags. Check whether a site is ready for plugin, theme, or WordPress core updates. Understand why a page, checkout, form, or permalink may not be working. Review plugin clutter and get a plain-English summary of Site Health and maintenance issues. Investigate slow pages without jumping between multiple admin screens. Built for wp-admin workflows ActionPanel AI lives in the WordPress dashboard, keeps recent conversations available in a sidebar, and includes starter prompts for common content, maintenance, and troubleshooting tasks. It is designed for site owners, content creators, developers, agencies, and support teams who want faster help rather than spending hours in admin screens or documentation. Site context it can use To answer questions and make changes, ActionPanel AI can use selected WordPress context such as post and page content (including block content and custom fields), menus, categories and tags, media details, block templates, template parts, and global styles, along with plugin and theme details, Site Health results, REST/runtime information, scheduled tasks, performance signals, WooCommerce setup, same-site page checks, and approved debug log excerpts. Write operations are optional and turned off until you enable them. When enabled, they cover content and site changes (such as posts, pages, custom post types and fields, menus, taxonomy terms, media, SEO fields, templates, and global styles) as well as maintenance actions (such as clearing caches, flushing rewrite rules, running scheduled tasks, and updating allowlisted settings). You stay in control Admin-only access inside WordPress. Reads and writes can each be turned on or off in ActionPanel settings. Optional per-request approval before site data is shared. Optional read-only debug log sharing that can be turned off anytime. Live-impacting changes — publishing, editing, or deleting existing content, and maintenance actions — require explicit approval; safe draft-only writes may be approved automatically when that setting is enabled. External Services This plugin connects to an external service at https://api.actionpanelai.com. Plugin UI JavaScript/CSS assets are bundled locally in the plugin (not remote-loaded), and any external links shown in the UI are only opened through user-initiated navigation. Requests are sent when: An administrator allows WordPress to send requests to ActionPanel AI and uses chat, content, or diagnostic tools. The assistant reads site data or content needed to answer a question or make a requested change. An administrator asks the assistant to create or edit content and, where required, approves the change. Account/login features are used. Optional log reads are enabled to read sanitized excerpts from a readable WordPress debug log file when WP_DEBUG is enabled and WP_DEBUG_LOG is set to true or an absolute file path. WordPress personal data export/erase tools are used for ActionPanel AI data. Data may include (depending on feature use): Chat messages. Images you attach in chat. Post and page content, including block content and custom fields, that the assistant reads or is asked to create or edit. Menu, taxonomy, media, template, template-part, and global-style data for content and design changes. SEO field values read from or written through your active SEO plugin. Site diagnostics/context. Site configuration summaries, including plugin/theme details, WordPress settings, REST/runtime, and performance diagnostics. Same-site diagnostic HTTP results, such as response status, selected headers, asset URLs, and redacted text previews from pages an administrator asks the assistant to inspect. Sanitized excerpts from a readable WordPress debug log file (only if enabled). Sampled or masked user/account metadata used for troubleshooting. Sanitized home-root server configuration snippets and drop-in metadata. Allowlisted theme or upload file metadata or text contents, plus plugin manifests, needed for troubleshooting. Session/auth metadata required for service operation. Email address and site URL for account and privacy workflows. Safeguards: External API calls are disabled by default on fresh installs until an administrator completes setup. Write operations are optional and disabled until an administrator enables them. “Per-Request Approval for Reads” can require a preview and approval before site data is shared. Log reads are optional, read-only, require WP_DEBUG plus WP_DEBUG_LOG set to true or an absolute debug log file path, and can be turned off at any time. AI initiated write operations require explicit approval before live changes are applied; only safe draft-only writes may be auto-approved, and only when that setting is enabled. Service policies: Privacy Policy: https://actionpanelai.com/privacy/ Terms of Service: https://actionpanelai.com/terms/ Privacy ActionPanel AI can send prompts and selected site context to external ActionPanel AI services when used. Depending on feature use, this can also include conversation history, images you attach in chat, post and page content (including block content and custom fields) that is read or edited, menu, taxonomy, media, template, and global-style data, SEO field values, configuration summaries, plugin/theme details, selected WordPress settings, sampled or masked user/account metadata, sanitized home-root server configuration snippets, plugin/drop-in metadata, and allowlisted theme or upload file metadata or contents needed for troubleshooting. Optional log sharing includes sanitized excerpts from a readable WordPress debug log file only when enabled. The plugin does not create, write, rotate, or relocate log files. Anonymous plugin session chat data is retained for up to 7 days before automatic deletion. Data Export and Erasure For account-linked data, WordPress Tools -> Export Personal Data and Tools -> Erase Personal Data can request site-scoped export/erase by email. The plugin exposes a public privacy-proof REST endpoint that returns only a challenge signature and site host; this lets ActionPanel AI verify site control before processing remote personal data export or erasure requests. Source Code For Bundled Assets The distributed JavaScript/CSS bundle in /build is generated from source included in this plugin package at: /assets-src/frontend Build/reproduction notes are included at: /assets-src/BUILD.md

SPM by Marwan is a professional-grade diagnostics and intelligence platform designed for WordPress administrators and developers. It provides deep visibility into your WordPress ecosystem, offering real-time monitoring, security auditing, and performance profiling to ensure your site remains fast, secure, and stable. The Problem Managing a modern WordPress ecosystem is inherently complex. Site owners and developers frequently struggle with: Slow Extensions: Identifying which specific extension is degrading page load times or consuming excessive server resources. Hidden PHP Errors: Unseen warnings and fatal errors that silently break functionality or create vulnerabilities. Security Risks: Unmaintained, abandoned, or vulnerable code exposing the site to potential exploits. Trust Issues: Uncertainty regarding an extension’s origin, development standards, and code quality. Update Degradation: Performance regressions and unexpected conflicts introduced immediately after updates. Core Features Real-Time Monitoring Engine: Actively tracks resource consumption, database queries, and execution times for every active extension. Identifies performance bottlenecks as they happen, preventing systemic slowdowns. Performance Diagnostics: Deep-dive profiling for individual extensions. Analyzes memory footprint and script execution to provide actionable intelligence on resource utilization. Security & Integrity Scanner: Proactively audits installed extensions against known vulnerability databases, flags high-risk code patterns, and verifies WordPress core files against official checksums to detect malicious tampering. Japanese SEO Spam Auto-Fix Engine: A specialized, deep-scanning engine designed to detect and eradicate the notorious “Japanese Keyword Hack”. Features a one-click Auto-Fix that intelligently restores or quarantines hijacked posts to protect your Google ranking without destroying your original content. Advanced Security: Defeating the Japanese SEO Keyword Hack The “Japanese Keyword Hack” is a devastating black-hat SEO attack where hackers exploit vulnerabilities in outdated plugins to inject massive amounts of auto-generated Japanese text and malicious links into your database and core files. This causes Google to flag your site as “hacked,” instantly destroying your SEO ranking. SPM by Marwan includes a highly specialized engine specifically built to defeat this attack: Deep Database Scanning: Actively crawls your wp_posts and wp_options tables, utilizing advanced Unicode block detection to find injected Japanese Hiragana, Katakana, and Kanji spam hidden within your legitimate content. Intelligent Auto-Fix (No Data Loss): When you click “Auto-Fix”, the scanner doesn’t just blindly delete your hijacked posts. Instead, it scans the WordPress Revision History for each infected post. It finds the last “clean” version of your post (before the hacker touched it) and seamlessly restores it. Fail-Safe Quarantining: If a post was created entirely by the hacker (meaning no clean revision exists), or if you have revisions disabled, the engine will safely quarantine the post by setting its status to Draft. This instantly removes the spam from the public internet—stopping the SEO bleed—while preserving the draft in your admin panel so you don’t lose any data. Orphaned File Detection: Scans your entire server structure to locate and quarantine backdoor PHP scripts that hackers leave behind to reinfect your site after you clean it. Core Checksum Verification: Verifies every single WordPress core file against the official WordPress.org cryptographic checksums to detect hidden cloaking scripts. Trust Verification: Evaluates code based on developer reputation, update frequency, repository standing, and code integrity. Establishes a trust score to help you make informed decisions about your technology stack. Historical Analytics: Maintains a robust ledger of performance and security metrics over time. Visualizes trends to help you understand the long-term impact of specific extensions and updates. Action Layer (Scan / Safe Mode / Reporting): Provides immediate remediation tools. Execute targeted scans, isolate problematic extensions using Safe Mode, and generate comprehensive diagnostics reports. External Services This plugin utilizes the WordPress.org Plugins API (https://api.wordpress.org) to verify plugin licenses and retrieve information about installed plugins. * What data is sent: The names and slugs of your active plugins are sent in the API request. * When it is sent: Data is sent when the plugin performs a scheduled background scan or when you manually click “Deep Scan” or “Refresh Now” on the dashboard. * Why it is used: To verify that the plugins running on your site are authentic, properly licensed, and available on the official WordPress.org directory, which enhances your site’s security and trust metrics. For more information, please refer to the WordPress.org Privacy Policy.