PHP

CTF Web 挑战专用侦察方法。当面对 CTF 靶场目标需要快速发现攻击入口时使用。与真实渗透的 recon 不同——CTF 是单个应用、有意留线索、侦察应在 2-3 轮内完成。覆盖源码泄露、备份文件、隐藏路径、页面线索提取

wgpsec/AboutSecurity

使用 dirsearch 进行 Web 目录和文件暴力枚举。当需要发现隐藏的目录、文件、后台路径、备份文件时使用。dirsearch 内置高质量字典，支持多扩展名、递归扫描、状态码过滤。任何涉及目录枚举、路径发现、后台查找、敏感文件发现的场景都应使用此技能

wgpsec/AboutSecurity

权限持久化方法论。当已获取目标系统权限后需要维持长期访问时使用。覆盖 Linux(cron/SSH key/webshell) 和 Windows(计划任务/服务/注册表/WMI) 持久化技术，以及 Web 层面的 webshell 部署和隐蔽策略

wgpsec/AboutSecurity

当拿到源码、代码片段、反编译产物，或用户要求代码审计时调用。负责输入点→传播链→危险函数Sink的静态审计，跨语言（PHP/Java/Python/Node/Go）危险函数速查，输出可疑调用链与缺陷触发条件。

zhaji2333/CkSKILLS

Coding principles and conventions for the Shopsys monorepo — DRY/KISS/reuse, comment and docblock quality, test-code rules, the per-folder visibility/typing rules (packages vs project-base vs…

shopsys/shopsys

Configure PHP ecosystem tooling, dependency management, and static analysis.

HoangNguyen0403/agent-skills-standard

ext-php-rs conventions for building PHP 8.2+ native extensions from a Rust core: phpclass/phpfunction macros, Zval conversion, PhpException mapping, php.ini loading, and PHPUnit testing.

Goldziher/ai-rulez

Test WordPress form submissions and email delivery. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

Work with JsonLogic business rules — the JSON-based conditional-logic format at jsonlogic.com.

aiskillstore/marketplace

PHP 源码认证、配置与逻辑类漏洞审计。当在 PHP 白盒审计中需要检测认证绕过、 权限控制、安全配置、密码学误用或业务逻辑漏洞时触发。

wgpsec/AboutSecurity

PHP 源码文件操作类漏洞审计。当在 PHP 白盒审计中需要检测文件相关漏洞时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity

PHP 框架特定安全审计。当在 PHP 白盒审计中已识别目标使用特定框架、 需要检查框架特有安全机制和常见配置缺陷时触发。

wgpsec/AboutSecurity

PHP 源码前端交互类漏洞审计。当在 PHP 白盒审计中需要检测前端安全相关漏洞时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity

PHP 源码注入类漏洞审计。当在 PHP 白盒审计中需要检测注入类漏洞时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity

PHP 源码序列化与模板类漏洞审计。当在 PHP 白盒审计中需要检测反序列化、XML 解析或模板注入漏洞时触发. An agent skill from wgpsec/AboutSecurity.

wgpsec/AboutSecurity

Information disclosure detection — error messages, files, headers, debug endpoints

NeoTheCapt/RedteamAgent

Server-side template injection detection, engine identification, and RCE

NeoTheCapt/RedteamAgent

Laravel framework patterns: Eloquent ORM relationships, N+1 query prevention, Form Request validation, Service layer architecture, and Pest/PHPUnit testing.

irahardianto/awesome-agv

Modern PHP 8.x idioms: strict types, typed properties, enums, readonly classes, match expressions, and PSR standards.

irahardianto/awesome-agv

Implement concurrency and non-blocking I/O in modern PHP. An agent skill from HoangNguyen0403/agent-skills-standard.

HoangNguyen0403/agent-skills-standard

Implement modern PHP error and exception handling patterns. An agent skill from HoangNguyen0403/agent-skills-standard.

HoangNguyen0403/agent-skills-standard

Write unit and integration tests for PHP applications with PHPUnit and Pest.

HoangNguyen0403/agent-skills-standard

Run code quality tools: PHP-CS-Fixer for style, PHPStan for static analysis, and type safety checks

dev-toolings/superpowers-symfony