PHP · For developers

PHP-only security standards for database access, password handling, and input validation.

HoangNguyen0403/agent-skills-standard

Stands up a production-ready Sent v3 integration in an existing codebase — SDK selection and client construction, x-api-key configuration, idempotent sends, retry and rate-limit handling, the…

aiskillstore/marketplace

Webshell samples for detection and analysis webshell 样本: PHP, ASP, ASPX, JSP, Python, Perl shells.

Ch1nfo/RiftX

Static ReDoS (Regular Expression Denial of Service) vulnerability scanner and regex quality auditor for codebases.

LeoYeAI/openclaw-master-skills

Backend service implementation patterns, standards, and procedures.

TheSoftwareHouse/copilot-collections

This skill MUST be used when the user asks to write tests, add tests, create test cases, run/execute/re-run/debug tests, test a specific class or method, or when working on any Test.php file in this…

shopsys/shopsys

Generates a Laravel architecture based on best practices for modern Laravel applications.

AratKruglik/claude-laravel

PHP coding rules: style, patterns, security, testing. An agent skill from softspark/ai-toolkit.

softspark/ai-toolkit

Select and configure the appropriate command runner based on Docker Compose standard, Symfony Docker (FrankenPHP), or host environment

dev-toolings/superpowers-symfony

Apply RED-GREEN-REFACTOR with Pest v4 (PHP 8.3+) for Symfony via the PHPUnit bridge; Foundry factories, WebTestCase, verify failures first

dev-toolings/superpowers-symfony

CTF/靶场 Flag 强制验证流程。当通过任何方式发现疑似 flag 字符串（含 flag{、FLAG{、ctf{ 等格式）时必须立即使用此 skill 验证，不要直接提交。防止因字符截断、编码错误、HTML 实体、base64 不完整解码、hex 截断等原因导致提交错误 flag。即使 flag 看起来完整，也可能存在隐藏字符或编码问题。覆盖 SQL…

wgpsec/AboutSecurity

CTF Web 挑战专用侦察方法。当面对 CTF 靶场目标需要快速发现攻击入口时使用。与真实渗透的 recon 不同——CTF 是单个应用、有意留线索、侦察应在 2-3 轮内完成。覆盖源码泄露、备份文件、隐藏路径、页面线索提取

wgpsec/AboutSecurity

权限持久化方法论。当已获取目标系统权限后需要维持长期访问时使用。覆盖 Linux(cron/SSH key/webshell) 和 Windows(计划任务/服务/注册表/WMI) 持久化技术，以及 Web 层面的 webshell 部署和隐蔽策略

wgpsec/AboutSecurity

当拿到源码、代码片段、反编译产物，或用户要求代码审计时调用。负责输入点→传播链→危险函数Sink的静态审计，跨语言（PHP/Java/Python/Node/Go）危险函数速查，输出可疑调用链与缺陷触发条件。

zhaji2333/CkSKILLS

Coding principles and conventions for the Shopsys monorepo — DRY/KISS/reuse, comment and docblock quality, test-code rules, the per-folder visibility/typing rules (packages vs project-base vs…

shopsys/shopsys

Configure PHP ecosystem tooling, dependency management, and static analysis.

HoangNguyen0403/agent-skills-standard

Test WordPress form submissions and email delivery. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

PHP 源码认证、配置与逻辑类漏洞审计。当在 PHP 白盒审计中需要检测认证绕过、 权限控制、安全配置、密码学误用或业务逻辑漏洞时触发。

wgpsec/AboutSecurity

PHP 框架特定安全审计。当在 PHP 白盒审计中已识别目标使用特定框架、 需要检查框架特有安全机制和常见配置缺陷时触发。

wgpsec/AboutSecurity

PHP 源码前端交互类漏洞审计。当在 PHP 白盒审计中需要检测前端安全相关漏洞时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity

PHP 源码注入类漏洞审计。当在 PHP 白盒审计中需要检测注入类漏洞时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity

Information disclosure detection — error messages, files, headers, debug endpoints

NeoTheCapt/RedteamAgent

Server-side template injection detection, engine identification, and RCE

NeoTheCapt/RedteamAgent

Laravel framework patterns: Eloquent ORM relationships, N+1 query prevention, Form Request validation, Service layer architecture, and Pest/PHPUnit testing.

irahardianto/awesome-agv

Modern PHP 8.x idioms: strict types, typed properties, enums, readonly classes, match expressions, and PSR standards.

irahardianto/awesome-agv

Implement concurrency and non-blocking I/O in modern PHP. An agent skill from HoangNguyen0403/agent-skills-standard.

HoangNguyen0403/agent-skills-standard

Implement modern PHP error and exception handling patterns. An agent skill from HoangNguyen0403/agent-skills-standard.

HoangNguyen0403/agent-skills-standard

Write unit and integration tests for PHP applications with PHPUnit and Pest.

HoangNguyen0403/agent-skills-standard

Run code quality tools: PHP-CS-Fixer for style, PHPStan for static analysis, and type safety checks

dev-toolings/superpowers-symfony