Not in the top 1,000 by GitHub stars
0xShe/PHP-Code-Audit-Skill
PHP-Code-Audit-Skill是一个专注于PHP代码审计的Skill
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
php-archive-extract-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-audit-pipeline/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-auth-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-cmd-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-codeigniter-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-config-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-crlf-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-crypto-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-csrf-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-deser-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-exploit-chain-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-expr-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-file-read-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-file-upload-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-file-write-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-filesystem-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-laravel-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-ldap-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-logging-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-logic-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-nosql-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-open-redirect-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-route-mapper/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-route-tracer/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-session-cookie-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-sql-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-ssrf-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-symfony-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-thinkphp-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-tpl-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-vuln-scanner/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-wordpress-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-xss-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-xxe-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
php-yii-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
69d883e7983a → 69d883e7983a
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Heat
2.5- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
- php-archive-extract-audit
php-archive-extract-audit - php-audit-pipeline
php-audit-pipeline - php-auth-audit
php-auth-audit - php-cmd-audit
php-cmd-audit - php-codeigniter-audit
php-codeigniter-audit - php-config-audit
php-config-audit - php-crlf-audit
php-crlf-audit - php-crypto-audit
php-crypto-audit - php-csrf-audit
php-csrf-audit - php-deser-audit
php-deser-audit - php-exploit-chain-audit
php-exploit-chain-audit - php-expr-audit
php-expr-audit - php-file-read-audit
php-file-read-audit - php-file-upload-audit
php-file-upload-audit - php-file-write-audit
php-file-write-audit - php-filesystem-audit
php-filesystem-audit - php-laravel-audit
php-laravel-audit - php-ldap-audit
php-ldap-audit - php-logging-audit
php-logging-audit - php-logic-audit
php-logic-audit - php-nosql-audit
php-nosql-audit - php-open-redirect-audit
php-open-redirect-audit - php-route-mapper
php-route-mapper - php-route-tracer
php-route-tracer - php-session-cookie-audit
php-session-cookie-audit - php-sql-audit
php-sql-audit - php-ssrf-audit
php-ssrf-audit - php-symfony-audit
php-symfony-audit - php-thinkphp-audit
php-thinkphp-audit - php-tpl-audit
php-tpl-audit - php-vuln-scanner
php-vuln-scanner - php-wordpress-audit
php-wordpress-audit - php-xss-audit
php-xss-audit - php-xxe-audit
php-xxe-audit - php-yii-audit
php-yii-audit
How it works
php-archive-extract-audit
When your agent uses it
PHP Web 归档解压（Zip Slip/路径穿越）审计工具。识别解压条目名如何与目标目录拼接、是否存在 base dir 约束缺失，输出可利用性分级、可观测 PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
76 tokensAlways available to the agent
SKILL.md
1,735 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- ARCHIVE Sink（必做）
- 必检证据点（强制：trace 契约对齐）
- 可利用性与漏洞成立条件（必做）
- tracer 触发条件（必做）
- 报告输出
- 漏洞条目模板（强制）
Files
SKILL.mdcore6,028 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-audit-pipeline
When your agent uses it
PHP Web 全链路白盒代码安全审计流水线（多文件版编排）。作为总编排参考，按 Sink 类型调用各子审计 skill（`php-route-mapper/php-auth-audit/php-route-tracer/php-*-audit`），并复用统一输出与分级标准。
What it loads into context
Frontmatter
75 tokensAlways available to the agent
SKILL.md
10,721 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 运行依赖说明（避免误导）
- 无执行器时的人工等价落地（推荐）
- 编排说明
- 子审计覆盖矩阵（强制）
- 角色与方法
- 漏洞分级（强制使用）
- 关键约束（强制）
- 输入
- 输出目录结构（建议强制）
- 执行流程（阶段化流水线：更高真阳性）
- 漏洞详情模板（强制使用）
Files
SKILL.mdcore35,568 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-auth-audit
When your agent uses it
PHP Web 源码鉴权机制审计工具。从源码中识别所有认证/鉴权实现并分析风险，输出路由-鉴权映射与漏洞分析（含 PoC 与修复建议）。
What it loads into context
Frontmatter
55 tokensAlways available to the agent
SKILL.md
1,987 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- CRITICAL：完整分析（强制）
- 运行模式（强制：与流水线阶段对齐）
- 漏洞分级
- 输入依赖
- 识别鉴权实现（必做）
- 路由-鉴权映射（必做）
- 可疑模式检测（必做，给出证据链）
- 报告输出（按运行模式）
- PoC 验证模板（强制）
- 证据引用（按运行模式强制）
- tracer 证据缺失处理（强制）
Files
SKILL.mdcore6,810 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-cmd-audit
When your agent uses it
PHP Web 源码命令注入审计工具。识别命令执行 Sink（exec/system/shell_exec 等），追踪用户输入进入命令拼接，输出可利用性分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
65 tokensAlways available to the agent
SKILL.md
1,030 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- CRITICAL
- 分级与编号
- 命令执行 Sink（必做）
- 追踪与验证（必做）
- 报告输出
- 漏洞条目模板（强制）
Files
SKILL.mdcore3,391 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-codeigniter-audit
When your agent uses it
CodeIgniter 框架特效安全审计工具。针对 CodeIgniter 的 CSRF、XSS 输出过滤、数据库查询构造、路由与验证器配置、会话 Cookie 安全等机制进行白盒静态审计，并映射到通用漏洞类型体系（CSRF/AUTH/XSS/SQL/CFG/SESS 等）。
What it loads into context
Frontmatter
88 tokensAlways available to the agent
SKILL.md
1,005 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 输入
- 输出目录
- 框架识别（必做）
- 风险类型映射（必做）
- 必审清单（必做：逐项检查并输出结果）
- 可观测 PoC（必做：框架特效可观测验证框架）
- 输出完整性检查（强制）
Files
SKILL.mdcore3,494 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-config-audit
When your agent uses it
PHP Web 配置安全审计工具。识别 CORS/错误暴露/调试开关/安全头/危险运行时开关等，输出分级、可利用性分析、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
62 tokensAlways available to the agent
SKILL.md
924 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- 必检证据（强制）
- 可利用性与前置条件（强制）
- PoC（强制）
- 证据引用（强制：静态证据优先，trace 可选增强）
- 证据缺失处理（强制，遵循统一标准）
- 报告输出
Files
SKILL.mdcore3,186 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-crlf-audit
When your agent uses it
PHP Web 源码 CRLF/响应分割审计工具。识别用户输入进入 HTTP 响应头，分析换行/控制字符过滤与编码，输出分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
61 tokensAlways available to the agent
SKILL.md
676 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- 必检 Sink（强制）
- 必检过滤与归一化（强制）
- PoC（强制）
- 报告输出
- 条目模板（强制）
- 证据引用（强制：来自 php-route-tracer）
- tracer 证据缺失处理（强制）
Files
SKILL.mdcore2,388 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-crypto-audit
When your agent uses it
PHP Web 源码加密与密钥安全审计工具。识别弱哈希/弱加密/硬编码密钥/签名校验缺陷，输出分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
62 tokensAlways available to the agent
SKILL.md
512 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- 必检 Sink（强制）
- 必检要求（强制）
- PoC（强制框架）
- 报告输出
Files
SKILL.mdcore1,739 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-csrf-audit
When your agent uses it
PHP Web 源码 CSRF 审计工具。识别状态变更接口是否受 CSRF 保护，追踪 token 生成、校验与绕过条件，输出可利用性分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
67 tokensAlways available to the agent
SKILL.md
876 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- 保护点与必检内容（强制）
- 数据流追踪要求
- 报告输出
- 漏洞条目模板（强制）
- 证据引用（强制：来自 php-route-tracer）
- tracer 证据缺失处理（强制）
Files
SKILL.mdcore3,030 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-deser-audit
When your agent uses it
PHP Web 源码反序列化/对象注入审计工具。识别 unserialize 注入点与可控数据来源，追踪魔术方法链，输出可利用性分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
65 tokensAlways available to the agent
SKILL.md
755 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- 危险 Sink（必做）
- 可控性（必做）
- gadget 链识别（必做）
- tracer 触发条件（必做）
- 证据引用（强制：来自 php-route-tracer）
- tracer 证据缺失处理（强制）
- 报告输出
- PoC（强制，但标注为“概念 PoC/验证 PoC”）
Files
SKILL.mdcore2,639 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-exploit-chain-audit
When your agent uses it
PHP 利用链/POP(回弹)链聚合器。把已产出的各类漏洞报告按“前置条件满足”串成可利用链路叙事（不新增证据点字典）。
What it loads into context
Frontmatter
59 tokensAlways available to the agent
SKILL.md
1,368 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 关键约束
- 输入依赖（建议）
- 产出目录结构（建议强制）
- 输出模板（强制）
- 链路类型建议（用于聚合，不强制）
- 链路可利用性计算（强制规则）
- 实操输出要求
Files
SKILL.mdcore4,807 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-expr-audit
When your agent uses it
PHP Web 源码表达式注入（非模板）审计工具。识别用户可控表达式字符串进入表达式引擎求值/编译并最终导致敏感语义执行，输出可利用性分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
73 tokensAlways available to the agent
SKILL.md
1,635 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- EXPR Sink（必做）
- 必检证据点（必做，trace 契约对齐）
- 可控性与注入语义确认（必做）
- tracer 触发条件（必做）
- 报告输出
- 漏洞条目模板（强制）
Files
SKILL.mdcore5,687 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-file-read-audit
When your agent uses it
PHP Web 源码任意文件读取/路径穿越审计工具。识别文件读取 Sink，追踪路径来源与校验逻辑，输出可利用性分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
61 tokensAlways available to the agent
SKILL.md
1,147 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- FILE Sink（必做）
- 路径穿越检测（必做）
- 包含执行判定（强制：提升真阳性）
- tracer 触发条件（必做）
- 报告输出
- 漏洞条目模板（强制）
- tracer 证据缺失处理（强制）
Files
SKILL.mdcore4,013 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-file-upload-audit
When your agent uses it
PHP Web 源码文件上传审计工具。识别上传入口与保存路径、文件名处理与校验逻辑，检测任意文件上传/路径穿越/可执行上传风险，输出可利用性分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
73 tokensAlways available to the agent
SKILL.md
1,961 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 统一执行策略（强制）
- 统一审计标准（强制）
- 证据置信度字段与复核清单（强制）
- 分级与编号
- 上传入口识别（必做）
- 校验逻辑审计（必做）
- tracer 触发条件（必做）
- 报告输出
- 漏洞条目模板（强制）
- tracer 证据缺失处理（强制，遵循统一标准）
Files
SKILL.mdcore7,048 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-file-write-audit
When your agent uses it
PHP Web 源码任意文件写入审计工具。识别用户可控数据进入写入 Sink 的链路，追踪任意落点写入/路径穿越到 write，并评估写入后的可执行性（禁止省略）。
What it loads into context
Frontmatter
66 tokensAlways available to the agent
SKILL.md
2,507 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- WRITE Sink（必做）
- 路径穿越到写入落点检测（必做）
- 写入内容可控性与覆盖策略（必做）
- 写入后的可执行性/可触达性评估（必做）
- tracer 证据引用（强制：来自 php-route-tracer）
- tracer 证据缺失处理（强制）
- tracer 触发条件（必做）
- 报告输出
- 漏洞条目模板（强制）
Files
SKILL.mdcore8,516 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-filesystem-audit
When your agent uses it
PHP 文件系统操作审计工具。聚焦 mkdir/chmod/chown/unlink/rmdir/link/symlink/readlink/touch/权限与 TOCTOU 等操作的安全风险，为路径校验绕过与写入链利用提供“可利用性增强证据”（不替代 FILE/UPLOAD/WRITE 等 sink 子审计）。
What it loads into context
Frontmatter
82 tokensAlways available to the agent
SKILL.md
2,315 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 覆盖范围（必做）
- 关键输出要求（强制）
- 报告输出
- 漏洞编号规范（建议：FS）
- 漏洞条目模板（强制）
- 修复建议（强制要点）
Files
SKILL.mdcore7,990 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-laravel-audit
When your agent uses it
Laravel 框架特效安全审计工具。针对 Laravel 常见鉴权/CSRF/Session/模型填充/Blade 渲染等框架特性进行白盒静态审计，并将风险映射到你现有通用漏洞类型体系（AUTH/CSRF/LOGIC/XSS/CFG 等）。
What it loads into context
Frontmatter
82 tokensAlways available to the agent
SKILL.md
1,633 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 输入
- 输出目录
- 框架识别（必做）
- 风险类型映射（必做）
- 必审清单（必做：逐项检查并输出结果）
- 可观测 PoC（必做：框架特效可观测验证框架）
- 输出完整性检查（强制）
Files
SKILL.mdcore5,676 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-ldap-audit
When your agent uses it
PHP Web 源码 LDAP 注入审计工具。识别用户可控数据进入 LDAP filter/DN 构造并被 ldap_search/ldap_read 执行，输出可利用性分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
65 tokensAlways available to the agent
SKILL.md
1,454 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- LDAP Sink（必做）
- 必检证据点（必做，trace 契约对齐）
- 可控性与注入点确认（必做）
- tracer 触发条件（必做）
- 报告输出
- 漏洞条目模板（强制）
Files
SKILL.mdcore4,905 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-logging-audit
When your agent uses it
PHP Web 安全日志与监控审计工具。识别安全事件缺失、敏感信息写入日志、日志注入/伪造风险，以及日志与告警链路缺陷，并输出可利用性分级、可观测 PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
75 tokensAlways available to the agent
SKILL.md
2,173 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- 覆盖范围（必做：必须逐项检查并输出证据）
- 识别逻辑（必做）
- PoC（必做：可观测验证框架）
- 报告输出
- 漏洞条目模板（强制）
Files
SKILL.mdcore7,707 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-logic-audit
When your agent uses it
PHP Web 业务逻辑漏洞审计工具。识别认证/授权以外的逻辑缺陷：Mass Assignment、流程绕过、竞态条件、状态机缺陷、支付/权限时序漏洞等，输出证据链、分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
77 tokensAlways available to the agent
SKILL.md
1,308 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- 必检证据（强制）
- Mass Assignment 审计（必做）
- 竞态与幂等审计（必做）
- 流程绕过审计（必做）
- 类型比较绕过与弱类型漏洞（必做）
- 认证/账户工作流逻辑（必做）
- PoC（强制）
- 报告输出
- 条目模板（强制）
Files
SKILL.mdcore4,681 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-nosql-audit
When your agent uses it
PHP Web 源码 NoSQL 注入审计工具。识别用户输入进入 MongoDB/DocumentDB 查询构造，分析是否存在 operator 注入（$gt/$ne/$where 等），输出分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
67 tokensAlways available to the agent
SKILL.md
743 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- 必检 Sink（强制）
- 必检危险模式（强制）
- tracer 触发条件
- 报告输出
- 条目模板（强制）
- 证据引用（强制：来自 php-route-tracer）
- tracer 证据缺失处理（强制）
Files
SKILL.mdcore2,684 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-open-redirect-audit
When your agent uses it
PHP Web 源码开放重定向审计工具。识别用户可控重定向目的地进入 header Location/跳转函数，分析校验与 allowlist，输出分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
64 tokensAlways available to the agent
SKILL.md
771 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- 必检 Sink（强制）
- 可控性追踪（必做）
- 绕过条件（必做）
- 报告输出
- 条目模板（强制）
- 证据引用（强制：来自 php-route-tracer）
- tracer 证据缺失处理（强制）
Files
SKILL.mdcore2,668 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-route-mapper
When your agent uses it
PHP Web 源码路由与参数映射分析工具。从源码中提取所有入口路由与参数结构，输出完整请求模板与参数清单（禁止省略）。
What it loads into context
Frontmatter
48 tokensAlways available to the agent
SKILL.md
1,523 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- CRITICAL：完整输出（强制）
- 核心输入
- 输出目录结构（建议）
- 识别范围（必做）
- 参数结构解析（必做）
- 处理器位置（必做）
- 输出格式（强制）
Files
SKILL.mdcore5,312 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-route-tracer
When your agent uses it
PHP Web 路由到 Sink 的多层数据流追踪工具。根据用户指定路由，追踪从 handler 到最终敏感操作点，输出层级证据、参数变量追踪、可控性分析（不做漏洞结论）。
What it loads into context
Frontmatter
64 tokensAlways available to the agent
SKILL.md
3,953 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- CRITICAL：只输出追踪，不输出漏洞建议
- 输入依赖
- 追踪范围（必做）
- 输出文件结构（建议）
- 单路由报告模板（强制）
- 2) 参数进入点
- 3) 调用链层级证据（逐层，不省略）
- 4) 分支路径追踪（Branch Execution Proof，必须输出）
- 5) 参数可控性矩阵（Controllability Matrix，强制字段名与列必须一致）
- 6) Sink 定位（Sink Parameter Mapping，强制字段名与列必须一致）
Files
SKILL.mdcore14,106 bytesSKILL.mdcore14,106 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-session-cookie-audit
When your agent uses it
PHP Web 源码会话与 Cookie 安全审计工具。识别 session 固定、Cookie flags 不安全、JWT 验证缺陷与记住登录风险，输出分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
63 tokensAlways available to the agent
SKILL.md
748 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- 必检内容（强制）
- PoC 要求（强制）
- 证据引用（强制：来自 php-route-tracer）
- tracer 证据缺失处理（强制）
- 报告输出
- 条目模板（强制）
Files
SKILL.mdcore2,602 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-sql-audit
When your agent uses it
PHP Web 源码 SQL 注入漏洞审计工具。从源码中识别所有 SQL 执行点并分析注入风险，输出可利用性分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
57 tokensAlways available to the agent
SKILL.md
1,393 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- CRITICAL：禁止省略与禁止误报
- 分级与编号
- 输入依赖
- SQL Sink 识别（必做）
- 需要触发 tracer 的条件（必做）
- 报告输出
- 漏洞报告条目模板（强制）
Files
SKILL.mdcore4,626 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-ssrf-audit
When your agent uses it
PHP Web 源码 SSRF 审计工具。识别用户可控 URL/地址进入网络请求 Sink，追踪内网/协议/端口限制与回显，输出可利用性分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
68 tokensAlways available to the agent
SKILL.md
1,047 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- SSRF Sink（必做）
- 必做的安全检查点
- 触发 tracer 的条件
- 报告输出
- 漏洞条目模板（强制）
- 证据引用（强制：来自 php-route-tracer）
- tracer 证据缺失处理（强制）
Files
SKILL.mdcore3,404 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-symfony-audit
When your agent uses it
Symfony 框架特效安全审计工具。针对 Symfony 常见 security.yaml、CSRF、Twig/Twig raw、表达式与访问控制等框架机制做白盒静态审计，并将风险映射到通用漏洞类型体系（AUTH/CSRF/CFG/XSS/TPL/LOGIC 等）。
What it loads into context
Frontmatter
80 tokensAlways available to the agent
SKILL.md
1,228 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 输入
- 输出目录
- 框架识别（必做）
- 风险类型映射（必做）
- 必审清单（必做：逐项检查并输出结果）
- 可观测 PoC（必做：框架特效可观测验证框架）
- 输出完整性检查（强制）
Files
SKILL.mdcore4,386 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-thinkphp-audit
When your agent uses it
ThinkPHP 框架特效安全审计工具。针对 ThinkPHP 常见的鉴权/CSRF/模板转义/ORM 写入（Mass Assignment）/调试与配置暴露等机制进行白盒静态审计，并映射到通用漏洞类型体系（AUTH/CSRF/TPL/XSS/LOGIC/CFG/SESS/SQL 等）。
What it loads into context
Frontmatter
92 tokensAlways available to the agent
SKILL.md
1,695 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 输入
- 输出目录
- 框架识别（必做）
- 风险类型映射（必做）
- 必审清单（必做：逐项检查并输出结果）
- 可观测 PoC（必做：框架特效可观测验证框架）
- 输出完整性检查（强制）
Files
SKILL.mdcore5,991 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-tpl-audit
When your agent uses it
PHP Web 源码模板注入/SSTI 审计工具。识别模板引擎渲染点与模板名/表达式可控性，追踪到 eval/执行链，输出可利用性分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
72 tokensAlways available to the agent
SKILL.md
803 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- TPL Sink（必做）
- 可控性（必做）
- tracer 触发条件（必做）
- 证据引用（强制：来自 php-route-tracer）
- tracer 证据缺失处理（强制）
- 报告输出
Files
SKILL.mdcore2,817 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-vuln-scanner
When your agent uses it
PHP 组件版本漏洞检测工具。扫描 composer.json / composer.lock 或 jar/包元信息，匹配已知漏洞规则并输出报告（包含可能的触发点分析框架）。
What it loads into context
Frontmatter
52 tokensAlways available to the agent
SKILL.md
1,128 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 输入
- 规则与输出
- 扫描流程（必做）
- 输出报告结构（强制）
- 关键组件触发点矩阵（强制：用于驱动流水线阶段 3）
Files
SKILL.mdcore3,836 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-wordpress-audit
When your agent uses it
WordPress 框架特效安全审计工具。针对 WordPress 常见 nonce/capability/check_admin_referer、AJAX action、escape/sanitize、重定向、安全上传与远程请求等机制进行白盒静态审计，并映射到通用漏洞类型体系（AUTH/CSRF/XSS/SQL/CFG/SSRF 等）。
What it loads into context
Frontmatter
88 tokensAlways available to the agent
SKILL.md
1,267 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 输入
- 输出目录
- 框架识别（必做）
- 风险类型映射（必做）
- 必审清单（必做：逐项检查并输出结果）
- 可观测 PoC（必做：框架特效可观测验证框架）
- 输出完整性检查（强制）
Files
SKILL.mdcore4,437 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-xss-audit
When your agent uses it
PHP Web 源码 XSS 审计工具。识别用户输入进入输出上下文（HTML/属性/JS/URL/模板），分析转义与防护策略，输出可利用性分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
67 tokensAlways available to the agent
SKILL.md
772 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- XSS Sink（必做）
- 逃逸/防护检查（必做）
- tracer 触发条件（必做）
- 报告输出
- 漏洞条目模板（强制）
- 证据引用（强制：来自 php-route-tracer）
- tracer 证据缺失处理（强制）
Files
SKILL.mdcore2,650 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-xxe-audit
When your agent uses it
PHP Web 源码 XXE 审计工具。识别 XML 解析点与实体处理配置，追踪 XML 输入来源与回显，输出可利用性分级、PoC 与修复建议（禁止省略）。
What it loads into context
Frontmatter
61 tokensAlways available to the agent
SKILL.md
740 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 分级与编号
- XXE Sink（必做）
- 防护检查（必做）
- 输入来源与回显（必做）
- tracer 触发条件（必做）
- 证据引用（强制：来自 php-route-tracer）
- tracer 证据缺失处理（强制）
- 报告输出
Files
SKILL.mdcore2,542 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubphp-yii-audit
When your agent uses it
Yii 框架特效安全审计工具。针对 Yii（通常指 Yii2）访问控制（AccessControl/RBAC）、CSRF、输入过滤规则、输出编码策略、URL/重定向安全等进行白盒静态审计，并映射到通用漏洞类型体系（AUTH/CSRF/XSS/CFG/LOGIC 等）。
What it loads into context
Frontmatter
85 tokensAlways available to the agent
SKILL.md
1,062 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 输入
- 输出目录
- 框架识别（必做）
- 风险类型映射（必做）
- 必审清单（必做：逐项检查并输出结果）
- 可观测 PoC（必做：框架特效可观测验证框架）
- 输出完整性检查（强制）
Files
SKILL.mdcore3,767 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubSkills included
- php-archive-extract-audit
- php-audit-pipeline
- php-auth-audit
- php-cmd-audit
- php-codeigniter-audit
- php-config-audit
- php-crlf-audit
- php-crypto-audit
- php-csrf-audit
- php-deser-audit
- php-exploit-chain-audit
- php-expr-audit
- php-file-read-audit
- php-file-upload-audit
- php-file-write-audit
- php-filesystem-audit
- php-laravel-audit
- php-ldap-audit
- php-logging-audit
- php-logic-audit
- php-nosql-audit
- php-open-redirect-audit
- php-route-mapper
- php-route-tracer
- php-session-cookie-audit
- php-sql-audit
- php-ssrf-audit
- php-symfony-audit
- php-thinkphp-audit
- php-tpl-audit
- php-vuln-scanner
- php-wordpress-audit
- php-xss-audit
- php-xxe-audit
- php-yii-audit
Repository facts
- License
- No license detected
- Created
- Mar 24, 2026
- Last pushed
- Mar 25, 2026
- Forks
- 42
- Open issues
- 1
- Project activity
- Slowing
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 5, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 1 note
php-route-tracer/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- 3 dangerous shell commandsin 3 files: php-expr-audit/SKILL.md:18 php-sql-audit/SKILL.md:28 php-tpl-audit/SKILL.md:26
- 9 network referencesin 4 files: php-tpl-audit/SKILL.md:22 php-config-audit/SKILL.md:30 php-logic-audit/SKILL.md:71 and 1 more
- No hidden or obfuscated text
- No instruction overrides
- No executable scripts
- No access to secrets
- No requests to vote in Hot
Show all 12 signals by file
php-config-audit/SKILL.md
php-expr-audit/SKILL.md
- Dangerous shell operationline 18
- `eval($code)`（当 `$code` 可由用户控制时）
php-logic-audit/SKILL.md
php-open-redirect-audit/SKILL.md
php-sql-audit/SKILL.md
- Dangerous shell operationline 28
- 相对危险：`$pdo->query($sql)` / `$pdo->exec($sql)`（若 $sql 来自拼接/包含用户输入）
php-tpl-audit/SKILL.md
- Network accessline 22
- 当模板可控时：Blade raw 输出（`{!! !!}`）与 `@php` 指令属于高危执行链（必须用证据点落到渲染/编译入口） - Smarty： - `Smarty->fetch($template)` / `display($template)` - Network accessline 23
- Smarty： - `Smarty->fetch($template)` / `display($template)` - 自定义模板引擎： - Network accessline 24
- `Smarty->fetch($template)` / `display($template)` - Dangerous shell operationline 26
- `eval()`、`preg_replace('/e')`、`create_function` 等被用于模板表达式
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Signal confidence: 12 facts
- Network access in prose of the SKILL.mdphp-config-audit/SKILL.md:30Low confidence
- Network access in prose of the SKILL.mdphp-config-audit/SKILL.md:31Low confidence
- Dangerous shell operation in prose of the SKILL.mdphp-expr-audit/SKILL.md:18Low confidence
- Network access in prose of the SKILL.mdphp-logic-audit/SKILL.md:71Low confidence
- Network access in prose of the SKILL.mdphp-logic-audit/SKILL.md:73Low confidence
- Network access in prose of the SKILL.mdphp-open-redirect-audit/SKILL.md:22Low confidence
- Network access in prose of the SKILL.mdphp-open-redirect-audit/SKILL.md:24Low confidence
- Dangerous shell operation in prose of the SKILL.mdphp-sql-audit/SKILL.md:28Low confidence
- Network access in prose of the SKILL.mdphp-tpl-audit/SKILL.md:22Low confidence
- Network access in prose of the SKILL.mdphp-tpl-audit/SKILL.md:23Low confidence
- Network access in prose of the SKILL.mdphp-tpl-audit/SKILL.md:24Low confidence
- Dangerous shell operation in prose of the SKILL.mdphp-tpl-audit/SKILL.md:26Low confidence
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Compatible | Standard SKILL.md php-archive-extract-audit/SKILL.md | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md php-archive-extract-audit/SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md php-archive-extract-audit/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md php-archive-extract-audit/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md php-archive-extract-audit/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md php-archive-extract-audit/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
