PHP

Coding principles and conventions for this Shopsys project — DRY/KISS/reuse, comment and docblock quality, test-code rules, the project visibility/typing rules, and documentation best practices.

shopsys/shopsys

Create or extend an administration CRUD controller (list / detail / create / edit / delete pages for an entity) built on Shopsys\AdministrationBundle\Controller\AbstractCrudController.

shopsys/shopsys

The command catalog for this Shopsys project — how to build, run, test, check code, access the database, and sync the GraphQL schema, including the macOS Mutagen workflow.

shopsys/shopsys

Insecure deserialization hunting across Java / .NET / PHP / Python / Ruby / Node.

Encod3d-Sec/TORCH

Hunt Local File Inclusion (LFI), Remote File Inclusion (RFI), and Path Traversal

sickn33/agentic-awesome-skills

MallBase ThinkPHP 模型字段访问器与素材回显规则；在 Model 字段读写、访问器、修改器、with 关联、素材 ID 回显或 Service 字段组装优化时使用。

yyw-code/MallBase

Saga Pattern knowledge base. An agent skill from dykyi-roman/awesome-claude-code.

dykyi-roman/awesome-claude-code

WordPress block editor code review and Gutenberg block development patterns for WordPress 6.x+.

jorgerosal/wordpress-skills

WordPress plugin architecture review and WordPress.org submission standards.

jorgerosal/wordpress-skills

WordPress security code review and vulnerability detection. An agent skill from jorgerosal/wordpress-skills.

jorgerosal/wordpress-skills

WordPress theme code review and block theme development patterns for WordPress 6.6+.

jorgerosal/wordpress-skills

Teams, school teams, team photos, approval flow, TeamPhotosController, privacy, ispublic, PhotoObserver, MasksStudentIdentity, and safeguarding.

OpenLitterMap/openlittermap-web

Writing and fixing tests, test factories, Event::fake patterns, auth guard testing, PHPUnit configuration, deprecated test groups, and common test pitfalls.

OpenLitterMap/openlittermap-web

The olm:v5 migration script, UpdateTagsService, batch processing, migratedat, ClassifyTagsService deprecated mappings, and data migration from v4 category tables.

OpenLitterMap/openlittermap-web

Audit PHP web application source for critical vulnerabilities using PHP's specific sink and footgun catalog — object injection via unserialize and phar:// POP chains, type-juggling and magic-hash…

trilwu/secskills

Hunt planted webshells and backdoors across a web source tree — PHP first (also JSP, ASP, Node) — triaging a directory at scale, statically decoding obfuscation layers without ever executing the…

trilwu/secskills

Select and wrap BambooHR's official Python or PHP SDK, or a narrow direct HTTP adapter, with tenant isolation and typed errors.

jeremylongshore/tons-of-skills-marketplace

baserCMS 4 (CakePHP 2ベース) のコード・サイトを baserCMS 5 (CakePHP 5ベース) へアップグレード／移行する際に AIエージェントが遵守すべきルールとパターン集。「baserCMS 4 から 5 へ移行」「4系を5系にアップグレード」「BcDbMigrator でデータ移行」「BcAddonMigrator でテーマ／プラグイン変換」「CakePHP…

baserproject/basercms

A skill your agent uses when building or extending a Laravel 11/12 app — Eloquent models, migrations and relationships, routing with controllers and Form Requests, queues and background jobs…

ericrisco/rsc-harness

A skill your agent uses when writing, reviewing or modernizing PHP (8.3-8.5) outside Laravel — strict types, union and intersection types, readonly classes, backed enums, property hooks and…

ericrisco/rsc-harness

A skill your agent uses when building or customizing a Shopify store across its three code surfaces — themes (Liquid, Online Store 2.0 sections, blocks and JSON templates), apps (Remix with the…

ericrisco/rsc-harness

A skill your agent uses when building or hardening WordPress sites or WooCommerce stores and treating WordPress as the product rather than just writing PHP — block themes with theme.json, plugins…

ericrisco/rsc-harness

CTF 挑战中的源码审计方法。当发现 .git 目录、.bak/.zip 备份、/proc/self/environ 泄露源码时使用。与真实代码审计不同——CTF 源码中的漏洞是故意设置的，通常只有 1-2 个关键点。先找危险函数（sink），再追溯输入（source）到该函数的路径。覆盖 PHP/Python/Node.js/Java 四种语言的危险函数和漏洞模式

wgpsec/AboutSecurity

Provides AWS Lambda integration patterns for PHP with Symfony using the Bref framework.

giuseppe-trisciuoglio/developer-kit

Provides implementation patterns for Clean Architecture, Hexagonal Architecture (Ports & Adapters), and Domain-Driven Design in PHP 8.3+ with Symfony 7.x.

giuseppe-trisciuoglio/developer-kit

Build REST endpoints with API Resources, Sanctum authentication, and versioned route groups in Laravel.

HoangNguyen0403/agent-skills-standard

Build scalable asynchronous workflows using Queues, Jobs, and Events in Laravel.

HoangNguyen0403/agent-skills-standard

Implement Domain-Driven Design with typed DTOs, repository interfaces, and single-responsibility Action classes in Laravel.

HoangNguyen0403/agent-skills-standard

Harden Laravel apps with Policies for model authorization, Gate-based RBAC, validated mass assignment, and CSRF protection.

HoangNguyen0403/agent-skills-standard

Configure Redis session drivers, register security-header middleware, and prevent session fixation in Laravel.

HoangNguyen0403/agent-skills-standard

Configure Laravel ecosystem with custom Artisan commands, Vite asset bundling, Pint code styling, and Horizon queue monitoring.

HoangNguyen0403/agent-skills-standard

Write PHP following PSR coding standards, SOLID principles, and code-quality guidelines.

HoangNguyen0403/agent-skills-standard

Apply core PHP language standards and modern 8.x features. An agent skill from HoangNguyen0403/agent-skills-standard.

HoangNguyen0403/agent-skills-standard

PHP-only security standards for database access, password handling, and input validation.

HoangNguyen0403/agent-skills-standard

baserCMS 4 のテーマ（templates/layout・element・Blog/Pages/Mail テンプレート＋少数の Helper で構成）を baserCMS 5 のテーマプラグインへ移行する際のパターン集。「テーマを4から5へ移行」「BcAddonMigrator でテーマ変換後の手修正」「siteConfig[] 廃止」「fullUrl()…

baserproject/basercms

Stands up a production-ready Sent v3 integration in an existing codebase — SDK selection and client construction, x-api-key configuration, idempotent sends, retry and rate-limit handling, the…

aiskillstore/marketplace

Security pattern matching for code audit and content inspection: grep strings for source auditing, malicious-string signatures, PHP magic hashes, error-message patterns.

Ch1nfo/RiftX

Webshell samples for detection and analysis webshell 样本: PHP, ASP, ASPX, JSP, Python, Perl shells.

Ch1nfo/RiftX

Photo upload, tagging, verification status, summary generation, XP calculation, AddTagsToPhotoAction, UploadPhotoController, and the VerificationStatus enum.

OpenLitterMap/openlittermap-web

Static ReDoS (Regular Expression Denial of Service) vulnerability scanner and regex quality auditor for codebases.

LeoYeAI/openclaw-master-skills

Backend service implementation patterns, standards, and procedures.

TheSoftwareHouse/copilot-collections

Stability Patterns knowledge base. An agent skill from dykyi-roman/awesome-claude-code.

dykyi-roman/awesome-claude-code

This skill MUST be used when the user asks to write tests, add tests, create test cases, run/execute/re-run/debug tests, test a specific class or method, or when working on any Test.php file in this…

shopsys/shopsys

Generates a Laravel architecture based on best practices for modern Laravel applications.

AratKruglik/claude-laravel

PHP coding rules: style, patterns, security, testing. An agent skill from softspark/ai-toolkit.

softspark/ai-toolkit

Select and configure the appropriate command runner based on Docker Compose standard, Symfony Docker (FrankenPHP), or host environment

dev-toolings/superpowers-symfony

Apply RED-GREEN-REFACTOR with Pest v4 (PHP 8.3+) for Symfony via the PHPUnit bridge; Foundry factories, WebTestCase, verify failures first

dev-toolings/superpowers-symfony

CTF/靶场 Flag 强制验证流程。当通过任何方式发现疑似 flag 字符串（含 flag{、FLAG{、ctf{ 等格式）时必须立即使用此 skill 验证，不要直接提交。防止因字符截断、编码错误、HTML 实体、base64 不完整解码、hex 截断等原因导致提交错误 flag。即使 flag 看起来完整，也可能存在隐藏字符或编码问题。覆盖 SQL…

wgpsec/AboutSecurity