# From Plugin Security to Better AI Workflows with Zack Katz

Page: https://stenobird.com/podcast/the-wp-minute-5988501/from-plugin-security-to-better-ai-workflows-with-zack-katz
Text version: https://stenobird.com/podcast/the-wp-minute-5988501/from-plugin-security-to-better-ai-workflows-with-zack-katz.md
Podcast: [The WP Minute+](https://stenobird.com/podcast/the-wp-minute-5988501)
Published: 2026-06-22T11:45:00+00:00
Episode link: https://share.transistor.fm/s/a2c6624e
Audio file: https://media.transistor.fm/a2c6624e/8d1e5f50.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/the-wp-minute-5988501/episodes/from-plugin-security-to-better-ai-workflows-with-zack-katz
Duration seconds: 1944

## Resource

Thanks Pressable for supporting the show! Get your special hosting deal at https://pressable.com/wpminute Become a WP Minute Supporter & Slack member at https://thewpminute.com/support On this episode of The WP Minute+ podcast, GravityKit’s Zack Katz joins Eric to discuss his company’s forward-thinking features , including cryptographic signing on plugin updates and the new Block MCP tool. Zack shares that the recent plugin supply chain attacks inspired a more secure method for product distribution – potentially the first for a commercial plugin. Meanwhile, Block MCP fills a gap in the current WordPress AI landscape by working within the native block structure , rather than raw HTML. This episode provides you with the inside scoop on making WordPress safer and more user-friendly. Takeaways: Cryptographic signing ensures plugin updates are secure. Supply chain attacks are a real concern for plugin developers. GravityKit is the first to implement cryptographic signing in WordPress plugins. The Block MCP tool addresses frustrations with existing MCPs. AI can significantly enhance the editing experience in WordPress. Granular editing is simplified with the Block MCP tool. The Block MCP tool can automatically identify and use the best blocks. Internal linking can be improved using AI with the Block MCP. The plugin allows for non-destructive edits and easy rollbacks. Important Links: GravityKit products now give you a stronger reason to trust what you install Introducing Block MCP: the WordPress MCP we built because nothing else worked Block MCP: GitHub | Plugin The WP Minute+ Podcast: thewpminute.com/subscribe ★ Support this podcast ★

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/the-wp-minute-5988501/episodes/from-plugin-security-to-better-ai-workflows-with-zack-katz/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/the-wp-minute-5988501/from-plugin-security-to-better-ai-workflows-with-zack-katz.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.