PHP agent skills, page 4

Server-Side Template Injection — fingerprint the engine first (Jinja2 / Twig / Velocity / Freemarker / ERB / Smarty / Mako / Handlebars / Pug), then escalate the engine-specific primitive to RCE or…

PentesterFlow/agent

baserCMS の「通常プラグイン（サードパーティ／単体配布）」を monorepo の「コアプラグイン」に昇格させる手順。「コアプラグインに変更」「コアプラグイン化」「通常プラグインをコアに昇格」「monorepo に取り込む」等のときに参照する。プラグイン名の規約変更（bc- プレフィックス付与・CamelCase→ハイフン区切り）、.git/シンボリックリンク/standalone…

baserproject/basercms

Runs linting and static analysis on PHP/CSS/JS using phpcs, phpstan, and rector.

bonny/WordPress-Simple-History

Implements PAYUNi UPP checkout integration including AES256 encryption, form submission, and payment callback handling.

paid-tw/skills

MallBase 支付与退款回调安全规则；修改 backend/route/notify.php、PayNotifyController、NotifyService、WechatPaymentResultService、mbpaymentlog，或处理微信/其它渠道 webhook 的验签、解密、防重放、金额校验、幂等、事务与 HTTP 应答时使用。

yyw-code/MallBase

Tests applications using the Pest 4 PHP framework. An agent skill from AratKruglik/claude-laravel.

AratKruglik/claude-laravel

How to write GTM4WP CHANGELOG.md / readme.txt entries. An agent skill from duracelltomi/gtm4wp.

duracelltomi/gtm4wp

Internal: Extend v4 interactions end-to-end in a Core fork and submit a Core PR.

elementor/elementor

Operate the file-first workflow for evergreen and timely Markdown-managed posts on this blog.

benjamincrozat/blog-v5

Maintain Discord.php runtime bootstrapping, startup options, event loop, gateway connection, reconnection, member chunking, cache configuration, and process lifecycle.

discord-php/DiscordPHP

This skill should be used when the user asks to "audit Laravel queues", "review queue implementation", "check job code", "find queue issues", "queue review", or wants to analyze a Laravel project's…

LaravelDaily/AI-Workflows-For-Laravel

PHP Web 配置安全审计工具。识别 CORS/错误暴露/调试开关/安全头/危险运行时开关等，输出分级、可利用性分析、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

Fetches open GitHub issues for the current repository using the gh CLI.

scify/laravel-cookie-guard

baserCMS プラグインを 5.2系 から 5.3系（PHP 8.5 / CakePHP 5.2.x ベース、開発中）へ移行する際の baserCMS 固有の破壊的変更・非推奨・テスト基盤対応のレシピ集。「プラグインを5.3に対応」「baserCMS 5.3 マイグレーション」「PluginCollection::create(): $config null given」「Plugin…

baserproject/basercms

Expert guidance for PHP 8+ development, prioritizing code quality (SOLID, PSR standards), security practices, and testing requirements

Cecilapp/Cecil

MallBase ThinkPHP 后台路由与权限元数据规则；新增或调整 backend/route/api/admin 路由、System 权限码、菜单元数据、/:id 路径参数、共享 permission 或 sync:permissions 同步时使用。

yyw-code/MallBase

Runs a rector against real D11-compatible contrib modules to verify it transforms real-world code correctly, then captures the PHPStan deprecation message it covers.

palantirnet/drupal-rector

GRASP principles knowledge base for PHP 8.4 projects. An agent skill from dykyi-roman/awesome-claude-code.

dykyi-roman/awesome-claude-code

Symfony UX Map for interactive maps with Leaflet or Google Maps in Symfony.

smnandre/symfony-ux-skills

Flags and fixes performance issues in WooCommerce PHP code: missing post cache priming, uncached option lookups in loops, and inefficient SQL query patterns.

woocommerce/woocommerce

AchievementEngine, AchievementRepository, milestone checkers, AchievementsSeeder, userachievements pivot, AchievementsController API, and achievement evaluation flow.

OpenLitterMap/openlittermap-web

Maintain TYPES maps and subtype dispatch — Channel::TYPES, Interaction::TYPES, Component types, and related constants.

discord-php/DiscordPHP

Run tests, linting, and quality checks for Dokan development.

getdokan/dokan

READ-ONLY diagnostic: scan HAX webcomponents, themes, CMS backends (PHP/NodeJS HAXcms), the VitePress plugin, and the Google Apps Script add-on for code surfaces that render or consume pedagogical…

haxtheweb/haxcms-php

This skill should be used when the user asks to "audit Laravel project structure", "review project architecture", "check code organization", "find over-engineering", "find fat controllers"…

LaravelDaily/AI-Workflows-For-Laravel

baserCMS の plugins/baser-core/VERSION.txt に、リリース分の変更履歴（NEW/CHG/BUG）をコミットログから生成して追記する手順。「VERSION.txt を更新して」「リリースノートを作って」「変更履歴をまとめて」「今回のリリース分の変更点を書き出して」「前回リリースからの差分を VERSION.txt…

baserproject/basercms

WordPress Full Site Editing (FSE) theme architecture. An agent skill from Automattic/wordpress-agent-skills.

Automattic/wordpress-agent-skills

PSR-4 autoloading standard knowledge base for PHP 8.4 projects.

dykyi-roman/awesome-claude-code

适配 NexusPHPWeb 类型站点的站点配置与 infoFinder 字段编写。需要检查 assets/sitesmanifest.json 中站点 id 是否存在，缺失时先调用 Add Site 技能创建配置文件，然后依据 docs/SITECONFIGURATIONGUIDE.md 与 assets/siteconfigs.json 的 NexusPHPWeb 模板生成或更新…

JustLookAtNow/pt_mate

Move an existing website from another host to Hostinger web hosting (Shared, Cloud or Agency plans) without downtime: WordPress sites from a files archive and SQL dump, static and PHP sites from an…

hostinger/api-mcp-server

AdminController, photo approval, tag editing, deletion, MetricsService integration, admin middleware, verification queue, and admin XP.

OpenLitterMap/openlittermap-web

Prepare the Vortex codebase for a release - run checklist operations (deps, container images, PHP version, cache bumps, docs) and generate release notes at .artifacts/release-VERSION/release-notes.md.

drevops/vortex

Activates whenever referencing backend routes in frontend components.

slimani-dev/muraqib

A skill your agent uses when working with the WordPress Abilities API (wpregisterability, wpregisterabilitycategory, /wp-json/wp-abilities/v1/, @wordpress/abilities) including defining abilities…

gambitph/Stackable

Adds or updates a WordPress plugin changelog entry in readme.txt from the project's Release Roadmap for a confirmed plugin version.

gambitph/Stackable

PHP Web 源码表达式注入（非模板）审计工具。识别用户可控表达式字符串进入表达式引擎求值/编译并最终导致敏感语义执行，输出可利用性分级、PoC 与修复建议（禁止省略）。

0xShe/PHP-Code-Audit-Skill

Writes strictly typed modern PHP 8.3+ for Laravel, Symfony and plain projects, with PHPStan level 9, PHPUnit or Pest tests, typed DTOs and secure defaults.

Jeffallan/claude-skills

Develops WordPress themes, plugins, Gutenberg blocks and WooCommerce features with nonce, escaping and capability checks, phpcs linting and caching tuned for speed.

Jeffallan/claude-skills

Discover and evaluate Laravel packages via LaraPlugins.io MCP.

affaan-m/ECC

baserCMS（CakePHP5 / PHPUnit）のユニットテストをローカル Docker 環境で実行・調査する手順。「ユニットテストを実行して」「全テストを走らせて」「このテストだけ流して」「テスト失敗を調べて」「プラグイン単体でテストを動かしたい」「プラグインにテスト環境を導入したい」等のときに参照する。コンテナ名・実行コマンド・権限自動承認のためのコマンド整形・失敗の集計と切り分け方…

baserproject/basercms

PSR-1 and PSR-12 coding standards knowledge base for PHP 8.4 projects.

dykyi-roman/awesome-claude-code

Diagnose and fix a website on Hostinger web hosting (Shared, Cloud or Agency plans) that is down, slow, erroring, insecure or failing to build.

hostinger/api-mcp-server

Path traversal / Local File Inclusion detection→file-read→RCE for web apps.

s0ld13rr/pentestcode

REST API endpoints, route structure, auth guards, request/response contracts, error patterns, and the full API surface for web SPA and mobile clients.

OpenLitterMap/openlittermap-web

This skill should be used when the user asks to "audit Laravel API", "review API architecture", "check API code", "find API issues", "API review", or wants to analyze a Laravel API project for…

LaravelDaily/AI-Workflows-For-Laravel

Write idiomatic PHP code with generators, iterators, SPL data structures, and modern OOP features.

davila7/claude-code-templates

Web 安全攻防技术，包括 SQL 注入、XSS、文件上传、命令注入、SSRF、反序列化等常见漏洞的识别与利用. An agent skill from MuWinds/BUUCTF_Agent.

MuWinds/BUUCTF_Agent

Maintain Builder classes — outbound payload construction, validation, serialization, component handling, and fromPart symmetry.

discord-php/DiscordPHP