Category: Uncategorized
plugins/ai-draftsmith/
AI Draftsmith
A draft-first WordPress plugin for generating articles with Google Gemini, OpenRouter, or OpenAI using API keys supplied by the site administrator.
Overview
AI Draftsmith helps WordPress editors create structured post drafts from a topic and a small set of editorial instructions. The plugin is designed around human review: generated posts are saved as drafts by default so an editor can verify, revise, and approve the content before publication.
Key Features
Multiple AI Providers
Choose Google Gemini, OpenRouter, or OpenAI from the WordPress administration area.
Arabic & English
Create posts in Arabic or English with selectable tone and target word count.
Draft-First Workflow
Draft is the default post status. Publishing remains under the control of authorized WordPress users.
SEO Assistance
Generate an excerpt, suggested SEO title, meta description, tags, and WordPress-ready HTML.
Free-First Routing
An optional workflow can try configured free or free-tier providers before a paid provider.
Bring Your Own API Key
No AI account is bundled. Administrators use their own provider credentials and billing arrangements.
Installation
Secure API Key Configuration
API keys can be entered in the plugin settings. Administrators who prefer not to store credentials
in the WordPress options table can define them in wp-config.php.
define('GEMINI_API_KEY', 'YOUR_GEMINI_API_KEY');
define('OPENROUTER_API_KEY', 'YOUR_OPENROUTER_API_KEY');
define('OPENAI_API_KEY', 'YOUR_OPENAI_API_KEY');
Only configure providers you intend to use. Never publish API keys in posts, pages, themes, or public repositories.
External Services & Data Disclosure
AI Draftsmith connects to external AI services only when an authorized WordPress user explicitly requests content generation. The plugin itself does not operate an independent SaaS backend.
| Provider | Purpose | Data that may be sent |
|---|---|---|
| Google Gemini API | Article generation | Topic, language, tone, target length, keywords, optional instructions, and generated prompt. |
| OpenRouter | Article generation and free-model routing | Topic and generation instructions; site-identification headers may also be sent where required by the provider. |
| OpenAI API | Article generation or optional paid fallback | Topic, language, tone, target length, keywords, optional instructions, and generated prompt. |
API keys are sent only to their corresponding providers for authentication. Data sent to a provider is governed by that provider’s own terms, privacy policies, retention practices, quotas, and pricing.
Privacy
- No front-end analytics or advertising is added by AI Draftsmith.
- No developer-operated tracking service is required.
- No executable code is loaded remotely by the plugin.
- Generated content should not be assumed to be fact-checked.
- Site owners should avoid sending confidential or sensitive information unless permitted by the selected provider’s terms and their own policies.
Editorial Responsibility
AI-generated text can contain errors, outdated information, or unsupported claims. AI Draftsmith is designed as a writing assistant rather than an autonomous publisher. Site owners and editors remain responsible for reviewing accuracy, copyright, attribution, legality, safety, and suitability before publication.
Compatibility
| Current Version | 1.0.0 |
|---|---|
| WordPress | Requires WordPress 6.0 or later |
| PHP | Requires PHP 7.4 or later |
| License | GNU General Public License v2 or later |
| Author | Wael Badawy |
| Plugin Page | https://www.waelbadawy.com/ai-draftsmith/ |
Changelog
1.0.0
- Initial public release.
- Google Gemini, OpenRouter, and OpenAI provider support.
- Arabic and English generation.
- Draft-first publishing workflow.
- SEO title, excerpt, meta description, and tag generation.
- Optional free-first routing and paid fallback controls.
Support
For information about the author and future plugin updates, visit WaelBadawy.com. Once the plugin is accepted in the WordPress.org Plugin Directory, the official directory page can also be linked here.
Wish you the best for you and your family – Happy Eid
Wish you the best for you and your family – Happy Eid
Prof. Wael Badawy @wbadawy @waelbadawy
Privacy and security of the personal data of Egyptian citizens and foreigner
The draft data protection law is concerned with the privacy and security of the personal data of Egyptian citizens and foreigner individuals who live in Egypt. It is Egypt’s version of the GDPR.
The draft law protects any personal data, if it leads to identifying an individual. Examples include his/her name, address or photo. The law provides an additional layer of protection to sensitive data, such as an individual’s religion and his/her medical information. It sets the rights of individuals in relation to their personal information, such as their right to ask that their data be deleted, and the obligations of organizations collecting or processing data.
The main features of the draft law that may affect you as a business are:
- Limitation on the ability of organizations to collect, use, transfer or retain personal data.
- Duty to obtain a license and other compliance requirements, if data is controlled or processed (which is the case with all organizations).
- Regulations addressing duties of companies’ carrying out direct marketing.
Who should worry and why?
Any person collecting, controlling, processing and/or holding personal data for uses that are non-personal. This would basically include every business, company or other organization operating in Egypt. The consequences for non-compliance are severe; ranging from imprisonment and fines and up to revoking data related licenses and publication of the criminal verdict in media outlets.
How much time do you have to set your house in order?
Those included within the scope of the law will be expected to comply within 18 months from the issuance of the law (that is if the executive regulations are issued on schedule).
What should you do?
The starting point is to track the data cycle from when your organization receives the data, processes, and stores it until the data is deleted. Next, make sure you comply with each of the data protection principles as they have been emptied into legal obligations (see more on that below). Document this in a policy and implement it. Don’t forget to train your people.
Now you have an idea of the main highlights of the law and you want to understand more how data is handled under the law? Deep dive into the below explanation of the data protection principles adopted by the law.
Seven key principles for data protection
These are set in stone under the GDPR and mirrored in the Law:
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimization
- Accuracy
- Storage limitation
- Integrity and confidentiality (security)
- Accountability
We fleshed out three of the principles for you to get a clear idea:
- Lawfulness, fairness, and transparency
The principle – You must not collect or keep any personal data in electronic or physical form, except for lawful purposes, such as one of the following purposes:
- The person whose data is being collected has given his/her consent.
- The relevant document is anonymized.
- The company has a legitimate reason to keep the data.
- There is a legal or contractual obligation.
You must reveal the purpose of the data collection and processing.
How to comply? Ask yourself why you are collecting this data and if you are also processing it. Make sure your reasons are legitimate; where possible obtain the person’s consent. Inform the data subject.
Obtaining consent is the gold standard. Usually, document anonymization is used in medical applications and research.
Example – think of a financial institution keeping personal data to comply with its Know Your Customer (KYC) requirements under anti-money laundry laws.
- Accuracy
The principle – You must (i) ensure that the data collected is correct, and (ii) correct any inaccurate personal data.
How to comply? – Map your data; review it, make sure it is correct; and put in place workflows that allow data subjects to review their data and correct it.
Example – when a person’s address is part of the data collected, and the individual does not reside at that location anymore, you need to (i) correct the data; or (ii) include such address as the last known address/previous place of residence.
- Integrity and confidentiality (security)
The principle – You need to take the necessary technical and organizational measures for the protection of personal data to ensure there is no breach of confidentiality, hacking, destruction, alterations or damage to the personal data. You also need to appoint a data protection officer, who shall be registered with the regulator. This officer must carry out regular evaluation and checks of the data protection systems and document that.
How to comply? – Appoint a data protection officer; review your systems and workflows; draft a data security policy and implement it; train your people; and report data leakages when they happen.
Example – A business should not only address cybersecurity risks; it should also put in place technical measures (e.g. a secure process for disposal of documents containing Personal Data; securing access to locations/premises containing documents/devices with access to personal data). In addition, a business should take organizational measures (e.g. ensuring coordination between the relevant members of the organization on security processes like disposal of IT equipment which were used to store personal data).
What needs to change in the current draft?
Data protection is good and eventually leads to a better business environment for all of us. But, we are mostly worried about the imprisonment sanctions which, as currently drafted, are extraterritorial. This represents a personal threat to senior executives in Silicon Valley and Seattle. We see this as a disabling threat that may cause some companies to reconsider their investments in Egypt. The draft law is essentially borrowed from the GDPR. But on the sanctions part, we seem to have lost our sense of where the world is going and decided to go in the opposite direction.
Our Technology & Innovation team welcomes your questions: wael@waelbadawy.com
Nile University – Introduction
Presentation at the Nile University on August 27, 2019
for more information please email wbadawy@nu.edu.eg or Call +201099986998