Loading...
Loading...
Found 275 Skills
PHP Web source code CRLF/response splitting audit tool. Identifies user input that enters HTTP response headers, analyzes filtering and encoding of newlines/control characters, and outputs severity ratings, PoCs and fix suggestions (omission is prohibited).
Write modern PHP with generators, SPL, and PHP 8+ features. Use for PHP development or optimization.
PHP Web Source Code Authentication Mechanism Audit Tool. Identify all authentication/authorization implementations from the source code, analyze risks, and output route-authentication mapping and vulnerability analysis (including PoC and repair suggestions).
PHP 8+ web development with Composer, attributes, and modern frameworks. Use for .php files.
ThinkPHP 后端开发规范。当开发 ThinkPHP 项目、实现 REST API、模型数据访问、JWT 认证时使用此 skill。
PHP Web Security Logging and Monitoring Audit Tool. Identifies missing security events, sensitive data written to logs, log injection/forgery risks, and flaws in log and alert links, and outputs exploitability ratings, observable PoCs, and remediation recommendations (no omissions allowed).
Use when configuring, running, or fixing PHPStan static analysis in WordPress projects (plugins/themes/sites): phpstan.neon setup, baselines, WordPress-specific typing, and handling third-party plugin classes.
This is a skill to check for the presence of breaking changes during code reviews of PHP frameworks intended for public release, and verify whether appropriate handling is in place if any breaking changes exist.
Use when upgrading to PHP 8.1+, implementing type safety, configuring PHPStan/Rector/PHP-CS-Fixer, or modernizing PHP code with enums, DTOs, and readonly properties.
Generate a complete PHP Model Context Protocol server project with tools, resources, prompts, and tests using the official PHP SDK
Use when adding session-based login, logout, or user profile to a PHP web application. Integrates auth0/auth0-php — use even if the user says "add login to my PHP app".
Use when writing modern PHP 8.x code — enums, fibers, readonly properties, PSR standards, Composer, static analysis, SOLID patterns. Trigger conditions: PHP code authoring, enum design, readonly DTO creation, PSR-4 autoloading setup, PHPStan or Psalm configuration, PHP CS Fixer or Pint setup, Composer dependency management, SOLID principle application, type safety improvements, custom exception hierarchies, interface-driven design.