Psalm Security Analysis
cachethq/core
Runs and interprets Psalm security (taint) analysis on a Laravel project.
Security auditor for Laravel applications. An agent skill from aiskillstore/marketplace.
Install Laravel Security Audit
$ npx skills add aiskillstore/marketplace --skill laravel-security-audit -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install aiskillstore/marketplace laravel-security-audit --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/sickn33/laravel-security-audit .claude/skills/laravel-security-audit && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "laravel-security-audit" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/laravel-security-audit into .claude/skills/laravel-security-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "laravel-security-audit", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/laravel-security-auditType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add aiskillstore/marketplace --skill laravel-security-audit -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install aiskillstore/marketplace laravel-security-audit --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/sickn33/laravel-security-audit .agents/skills/laravel-security-audit && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "laravel-security-audit" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/laravel-security-audit into .agents/skills/laravel-security-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "laravel-security-audit", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add aiskillstore/marketplace --skill laravel-security-audit -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install aiskillstore/marketplace laravel-security-audit --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/sickn33/laravel-security-audit .cursor/skills/laravel-security-audit && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "laravel-security-audit" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/laravel-security-audit into .cursor/skills/laravel-security-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "laravel-security-audit", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/aiskillstore/marketplace.git --path skills/sickn33/laravel-security-audit--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add aiskillstore/marketplace --skill laravel-security-audit -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install aiskillstore/marketplace laravel-security-audit --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/sickn33/laravel-security-audit .gemini/skills/laravel-security-audit && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "laravel-security-audit" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/laravel-security-audit into .gemini/skills/laravel-security-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "laravel-security-audit", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install aiskillstore/marketplace laravel-security-auditInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add aiskillstore/marketplace --skill laravel-security-audit -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/sickn33/laravel-security-audit .github/skills/laravel-security-audit && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "laravel-security-audit" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/laravel-security-audit into .github/skills/laravel-security-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "laravel-security-audit", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add aiskillstore/marketplace --skill laravel-security-audit -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install aiskillstore/marketplace laravel-security-audit --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/sickn33/laravel-security-audit .opencode/skills/laravel-security-audit && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "laravel-security-audit" agent skill from https://github.com/aiskillstore/marketplace/tree/main/skills/sickn33/laravel-security-audit into .opencode/skills/laravel-security-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "laravel-security-audit", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
laravel-security-audit- GitHub stars
- 433
- Used in
- 4 other repos
- Token cost
- ~1.1k tokens
- SKILL.md length
- 493 words
- Files
- 2
- Skills in repo
- 1,044
- Repo updated
- First seen
- Licence
- None found
At a glance
Security auditor for Laravel applications. An agent skill from aiskillstore/marketplace.
- Works in 6 steps: Summary → Identified Vulnerabilities → Risk Level (per issue) → …
- Tasks that involve Backend development
- SKILL.md covers Skill Metadata, Role, Use This Skill When and Do NOT Use When, plus 6 more sections
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Laravel Security Audit is an agent skill from aiskillstore/marketplace. Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel security best practices.
Its SKILL.md is about 1.1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `skill-report.json`).
It sits in Security, covering Backend development, Security review and Web application vulnerabilities. It works with Laravel. The repository describes itself as: Security-audited skills for Claude, Codex & Claude Code. One-click install, quality verified.
When your agent uses it
- Tasks that involve Backend development
- Tasks that involve Security review
- Tasks that involve Web application vulnerabilities
Example prompts
- “/laravel-security-audit”
Workflow steps
6 steps, taken from the first numbered list in SKILL.md.
- Summary
- Identified Vulnerabilities
- Risk Level (per issue)
- Exploit Scenario (if applicable)
- Recommended Fix
- Secure Refactored Example (if needed)
What it can do on your machine
Read from SKILL.md and the folder at commit 44923f3. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are php).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Laravel Security Audit loads about 1.1k tokens when it runs. Until then it costs about 50 tokens; SKILL.md has 493 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: notes
The automated check noted patterns worth knowing about, such as sudo or a known installer.
- NoteMentions a .env fileSKILL.md:49
- Reviewing .env exposure risks - NoteMentions a .env fileSKILL.md:158
- .env accessible via web?
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
Without a licence we can't republish the file, so here is its outline and opening line. It has 493 words (~1,108 tokens).
“Name: laravel-security-audit Focus: Security Review & Vulnerability Detection Scope: Laravel 10/11+ Applications”
- name
- laravel-security-audit
- risk
- safe
- source
- community
Files
SKILL.md and 1 other file in skills/sickn33/laravel-security-audit of aiskillstore/marketplace.
- SKILL.md
- skill-report.json
Open the folder on GitHubat commit 44923f3
Used in 4 other repositories
We found 13 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 4 other GitHub owners. This page covers the copy in aiskillstore/marketplace, which our catalogue first saw on October 7, 2026.
- sickn33/agentic-awesome-skillsskills/laravel-security-auditplugins/agentic-awesome-skills/skills/laravel-security-audit+1 more
- lingxling/awesome-skills-cnantigravity-awesome-skills/skills/laravel-security-auditantigravity-awesome-skills/plugins/agentic-awesome-skills/skills/laravel-security-audit+1 more
- benjaminasterA/antigravity-awesome-skillsskills/laravel-security-audit
- henryalouf/ruflow.agents/skills/laravel-security-audit.agents/skills/antigravity-awesome-skills/skills/laravel-security-audit+4 more
Compare with similar skills
Laravel Security Audit next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Laravel Security Audit this skillaiskillstore/marketplace | 433 | 4 repos | ~1.1k | Automated safety check: Notes | None | |
| Psalm Security Analysiscachethq/core | 230 | — | ~4.7k | Automated safety check: Pass | Custom licence | |
| Php SecurityHoangNguyen0403/agent-skills-standard | 572 | — | ~604 | Automated safety check: Pass | MIT | |
| Django Access Reviewgetsentry/skills | 1k | 3 repos | ~2.6k | Automated safety check: Notes | Apache-2.0 | |
| Php Laravel Audit0xShe/PHP-Code-Audit-Skill | 402 | 1 repos | ~821 | Automated safety check: Pass | None | |
| Auditing Php Applicationstrilwu/secskills | 157 | — | ~2.8k | Automated safety check: Pass | MIT |
Similar skills
Php Security
HoangNguyen0403/agent-skills-standard
PHP-only security standards for database access, password handling, and input validation.
- Official
Django Access Review
getsentry/skills
Django access control and IDOR security review. An agent skill from getsentry/skills.
Php Laravel Audit
0xShe/PHP-Code-Audit-Skill
Laravel 框架特效安全审计工具。针对 Laravel 常见鉴权/CSRF/Session/模型填充/Blade 渲染等框架特性进行白盒静态审计，并将风险映射到你现有通用漏洞类型体系（AUTH/CSRF/LOGIC/XSS/CFG 等）。
Auditing Php Applications
trilwu/secskills
Audit PHP web application source for critical vulnerabilities using PHP's specific sink and footgun catalog — object injection via unserialize and phar:// POP chains, type-juggling and magic-hash…
Php Framework Audit
wgpsec/AboutSecurity
PHP 框架特定安全审计。当在 PHP 白盒审计中已识别目标使用特定框架、 需要检查框架特有安全机制和常见配置缺陷时触发。
More from aiskillstore/marketplace
All 1,040 skills in this repoCode Stats
aiskillstore/marketplace
Analyze codebase with tokei (fast line counts by language) and difft (semantic AST-aware diffs).
Data Processing
aiskillstore/marketplace
Process JSON with jq and YAML/TOML with yq. An agent skill from aiskillstore/marketplace.
Doc Scanner
aiskillstore/marketplace
Scans for project documentation files (AGENTS.md, CLAUDE.md, GEMINI.md, COPILOT.md, CURSOR.md, WARP.md, and 15+ other formats) and synthesizes guidance.
File Search
aiskillstore/marketplace
Modern file and content search using fd, ripgrep (rg), and fzf.
Find Replace
aiskillstore/marketplace
Modern find-and-replace using sd (simpler than sed) and batch replacement patterns.
Project Planner
aiskillstore/marketplace
Detects stale project plans and suggests session commands. An agent skill from aiskillstore/marketplace.
Related
Works with
Categories
Questions about Laravel Security Audit
What does Laravel Security Audit do?
Security auditor for Laravel applications. An agent skill from aiskillstore/marketplace. Laravel Security Audit is an agent skill from aiskillstore/marketplace. Security auditor for Laravel applications.
When should I use Laravel Security Audit?
Laravel Security Audit fits situations like: tasks that involve Backend development; tasks that involve Security review; tasks that involve Web application vulnerabilities.
How do I install Laravel Security Audit in Claude Code?
Run `npx skills add aiskillstore/marketplace --skill laravel-security-audit -a claude-code`. Or copy the skill folder (skills/sickn33/laravel-security-audit in aiskillstore/marketplace) into .claude/skills/laravel-security-audit in your project. Claude Code loads it when a task matches its description.
How do I install Laravel Security Audit in Codex?
Run `npx skills add aiskillstore/marketplace --skill laravel-security-audit -a codex`. Or copy the skill folder (skills/sickn33/laravel-security-audit in aiskillstore/marketplace) into .agents/skills/laravel-security-audit in your project. Codex loads it when a task matches its description.
Can I use Laravel Security Audit in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add aiskillstore/marketplace --skill laravel-security-audit -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/laravel-security-audit, .gemini/skills/laravel-security-audit, .github/skills/laravel-security-audit and .opencode/skills/laravel-security-audit in your project.
What does Laravel Security Audit need to run?
SKILL.md names no scripts, command-line tools or credentials: Laravel Security Audit is instructions for the agent only.
Does Laravel Security Audit access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Laravel Security Audit safe to install?
Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.
What licence does Laravel Security Audit use?
No licence was found for Laravel Security Audit or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.
How many tokens does Laravel Security Audit use?
About 1.1k tokens (SKILL.md is roughly 4.4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Laravel Security Audit?
Skills that share tags, products or a category with Laravel Security Audit: Psalm Security Analysis (cachethq/core, 230 stars), Php Security (HoangNguyen0403/agent-skills-standard, 572 stars), Django Access Review (getsentry/skills, 1k stars) and Php Laravel Audit (0xShe/PHP-Code-Audit-Skill, 402 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Laravel Security Audit?
aiskillstore (a GitHub organization) maintains it in aiskillstore/marketplace, which has 433 GitHub stars. The repository holds 1,044 skills in this directory. The repository was last updated on October 10, 2026.
Source: aiskillstore/marketplace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.