Search
PHP · For devops and sre engineers
Skills
Sort:BestMost starsTrending todayTrending this weekTrending this monthNewestRecently updatedName
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | A skill your agent uses when local PHP environment is unavailable. | yansongda/ | 5.4k | — | ~968 | Automated safety check: Pass | MIT | 3 days ago |
| 2 | Compile PHP.wasm main modules and side modules (dynamic extensions) for Node.js and web platforms. | WordPress/ | 2k | — | ~2.8k | Automated safety check: Pass | GPL-2.0 | today |
| 3 | PHP Web 归档解压（Zip Slip/路径穿越）审计工具。识别解压条目名如何与目标目录拼接、是否存在 base dir 约束缺失，输出可利用性分级、可观测 PoC 与修复建议（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~883 | Automated safety check: Pass | No licence | 6 mo ago |
| 4 | 4.Ddev DDEV local development environment guidance for Docker-based PHP/Node projects. | haxtheweb/ | 130 | — | ~1.6k | Automated safety check: Pass | Apache-2.0 | yesterday |
| 5 | PHP Web 源码鉴权机制审计工具。从源码中识别所有认证/鉴权实现并分析风险，输出路由-鉴权映射与漏洞分析（含 PoC 与修复建议）。 | 0xShe/ | 402 | 1 repo | ~951 | Automated safety check: Pass | No licence | 6 mo ago |
| 6 | A skill your agent uses when working on Docker-backed Shopware projects and needing to run Shopware or Symfony CLI commands, interact with project services or databases, start or stop the… | shopware/ | 124 | — | ~1.8k | Automated safety check: Pass | MIT | 4 days ago |
| 7 | Audit source code for exploitable vulnerabilities using threat-model-driven review, taint tracing, invariant checking, and variant analysis. | trilwu/ | 157 | — | ~3.2k | Automated safety check: Pass | MIT | 1 mo ago |
| 8 | PHP Web 源码命令注入审计工具。识别命令执行 Sink（exec/system/shellexec 等），追踪用户输入进入命令拼接，输出可利用性分级、PoC 与修复建议（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~465 | Automated safety check: Pass | No licence | 6 mo ago |
| 9 | Prepare a DevChain remote VM for development of a project. An agent skill from TwiTech-LAB/devchain. | TwiTech-LAB/ | 101 | — | ~1.8k | Automated safety check: Notes | MIT | yesterday |
| 10 | Deploy an existing project to a website on Hostinger web hosting (Shared, Cloud or Agency plans) and keep it deployed: picks the right deploy for static sites, Node.js apps (Next.js, Nuxt, Express… | hostinger/ | 160 | — | ~2.7k | Automated safety check: Notes | MIT | 2 days ago |
| 11 | PHP Web 配置安全审计工具。识别 CORS/错误暴露/调试开关/安全头/危险运行时开关等，输出分级、可利用性分析、PoC 与修复建议（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~417 | Automated safety check: Notes | No licence | 6 mo ago |
| 12 | PHP Web 源码表达式注入（非模板）审计工具。识别用户可控表达式字符串进入表达式引擎求值/编译并最终导致敏感语义执行，输出可利用性分级、PoC 与修复建议（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~720 | Automated safety check: Pass | No licence | 6 mo ago |
| 13 | baserCMS（CakePHP5 / PHPUnit）のユニットテストをローカル Docker 環境で実行・調査する手順。「ユニットテストを実行して」「全テストを走らせて」「このテストだけ流して」「テスト失敗を調べて」「プラグイン単体でテストを動かしたい」「プラグインにテスト環境を導入したい」等のときに参照する。コンテナ名・実行コマンド・権限自動承認のためのコマンド整形・失敗の集計と切り分け方… | baserproject/ | 191 | — | ~4.9k | Automated safety check: Pass | MIT | today |
| 14 | Path traversal / Local File Inclusion detection→file-read→RCE for web apps. | s0ld13rr/ | 828 | — | ~602 | Automated safety check: Notes | MIT | 9 days ago |
| 15 | PHP Web 源码任意文件读取/路径穿越审计工具。识别文件读取 Sink，追踪路径来源与校验逻辑，输出可利用性分级、PoC 与修复建议（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~558 | Automated safety check: Pass | No licence | 6 mo ago |
| 16 | Detect insecure file upload vulnerabilities in a codebase using a three-phase approach: discovery (find all upload sites), batched verify (check extension bypass and related issues in parallel… | utkusen/ | 1.3k | — | ~7.3k | Automated safety check: Pass | MIT | 6 mo ago |
| 17 | ClusteringService, tile keys, dirty tiles/teams, clustering commands, ClusterController GeoJSON API, PhotoObserver dirty marking, and map cluster rendering. | OpenLitterMap/ | 134 | — | ~2k | Automated safety check: Pass | GPL-3.0 | 26 days ago |
| 18 | PHP Web 源码任意文件写入审计工具。识别用户可控数据进入写入 Sink 的链路，追踪任意落点写入/路径穿越到 write，并评估写入后的可执行性（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~1.2k | Automated safety check: Pass | No licence | 6 mo ago |
| 19 | PHP Web 源码 LDAP 注入审计工具。识别用户可控数据进入 LDAP filter/DN 构造并被 ldapsearch/ldapread 执行，输出可利用性分级、PoC 与修复建议（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~694 | Automated safety check: Pass | No licence | 6 mo ago |
| 20 | PHP Web 安全日志与监控审计工具。识别安全事件缺失、敏感信息写入日志、日志注入/伪造风险，以及日志与告警链路缺陷，并输出可利用性分级、可观测 PoC 与修复建议（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~941 | Automated safety check: Pass | No licence | 6 mo ago |
| 21 | PHP Web 业务逻辑漏洞审计工具。识别认证/授权以外的逻辑缺陷：Mass Assignment、流程绕过、竞态条件、状态机缺陷、支付/权限时序漏洞等，输出证据链、分级、PoC 与修复建议（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~533 | Automated safety check: Pass | No licence | 6 mo ago |
| 22 | PHP Web 源码路由与参数映射分析工具。从源码中提取所有入口路由与参数结构，输出完整请求模板与参数清单（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~847 | Automated safety check: Pass | No licence | 6 mo ago |
| 23 | PHP Web 路由到 Sink 的多层数据流追踪工具。根据用户指定路由，追踪从 handler 到最终敏感操作点，输出层级证据、参数变量追踪、可控性分析（不做漏洞结论）。 | 0xShe/ | 402 | 1 repo | ~2.3k | Automated safety check: Pass | No licence | 6 mo ago |
| 24 | PHP Web 源码模板注入/SSTI 审计工具。识别模板引擎渲染点与模板名/表达式可控性，追踪到 eval/执行链，输出可利用性分级、PoC 与修复建议（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~413 | Automated safety check: Pass | No licence | 6 mo ago |
| 25 | PHP 组件版本漏洞检测工具。扫描 composer.json / composer.lock 或 jar/包元信息，匹配已知漏洞规则并输出报告（包含可能的触发点分析框架）。 | 0xShe/ | 402 | 1 repo | ~504 | Automated safety check: Pass | No licence | 6 mo ago |
| 26 | Mine errorlog for creds, paths, SQL when leak hunt finds. An agent skill from uphiago/recon-skills. | uphiago/ | 1.3k | — | ~3.3k | Automated safety check: Pass | MIT | 1 mo ago |
| 27 | PHP Web 源码 CRLF/响应分割审计工具。识别用户输入进入 HTTP 响应头，分析换行/控制字符过滤与编码，输出分级、PoC 与修复建议（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~323 | Automated safety check: Pass | No licence | 6 mo ago |
| 28 | PHP Web 源码加密与密钥安全审计工具。识别弱哈希/弱加密/硬编码密钥/签名校验缺陷，输出分级、PoC 与修复建议（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~224 | Automated safety check: Pass | No licence | 6 mo ago |
| 29 | PHP Web 源码 XXE 审计工具。识别 XML 解析点与实体处理配置，追踪 XML 输入来源与回显，输出可利用性分级、PoC 与修复建议（禁止省略）。 | 0xShe/ | 402 | 1 repo | ~368 | Automated safety check: Pass | No licence | 6 mo ago |
| 30 | 30.Sast Rce Detect Remote Code Execution (RCE) vulnerabilities in a codebase using a three-phase approach: recon (find dangerous execution sinks), batched verify (trace user input to sinks in parallel… | utkusen/ | 1.3k | — | ~8.3k | Automated safety check: Pass | MIT | 6 mo ago |
| 31 | Mass scan for exposed env files, backups, and git configs. An agent skill from uphiago/recon-skills. | uphiago/ | 1.3k | — | ~2.2k | Automated safety check: Notes | MIT | 1 mo ago |
| 32 | PhotoTag, PhotoTagExtraTags, categories, litter objects, materials, brands, ClassifyTagsService, GeneratePhotoSummaryService, tag migration, and the v4-to-v5 conversion. | OpenLitterMap/ | 134 | — | ~4.5k | Automated safety check: Pass | GPL-3.0 | 26 days ago |
| 33 | The command catalog for this Shopsys project — how to build, run, test, check code, access the database, and sync the GraphQL schema, including the macOS Mutagen workflow. | shopsys/ | 350 | — | ~1.3k | Automated safety check: Notes | Unknown | yesterday |
| 34 | Security pattern matching for code audit and content inspection: grep strings for source auditing, malicious-string signatures, PHP magic hashes, error-message patterns. | Ch1nfo/ | 114 | — | ~425 | Automated safety check: Pass | MIT | 20 days ago |
| 35 | Select and configure the appropriate command runner based on Docker Compose standard, Symfony Docker (FrankenPHP), or host environment | dev-toolings/ | 223 | — | ~481 | Automated safety check: Pass | MIT | 5 days ago |
| 36 | 使用 dirsearch 进行 Web 目录和文件暴力枚举。当需要发现隐藏的目录、文件、后台路径、备份文件时使用。dirsearch 内置高质量字典，支持多扩展名、递归扫描、状态码过滤。任何涉及目录枚举、路径发现、后台查找、敏感文件发现的场景都应使用此技能 | wgpsec/ | 1.8k | — | ~520 | Automated safety check: Pass | No licence | yesterday |
| 37 | PHP 源码序列化与模板类漏洞审计。当在 PHP 白盒审计中需要检测反序列化、XML 解析或模板注入漏洞时触发. An agent skill from wgpsec/AboutSecurity. | wgpsec/ | 1.8k | — | ~689 | Automated safety check: Pass | No licence | yesterday |
