Security Review
github/awesome-copilot
AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching…
Synchronize bilingual documentation when StaticPHP v3 user-facing or developer-facing documentation must change.
$ npx skills add crazywhalecc/static-php-cli --skill staticphp-documentation-sync -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install crazywhalecc/static-php-cli staticphp-documentation-sync --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/crazywhalecc/static-php-cli.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/staticphp-documentation-sync .claude/skills/staticphp-documentation-sync && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "staticphp-documentation-sync" agent skill from https://github.com/crazywhalecc/static-php-cli/tree/v3/.agents/skills/staticphp-documentation-sync into .claude/skills/staticphp-documentation-sync/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "staticphp-documentation-sync", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/crazywhalecc/static-php-cli/tree/v3/.agents/skills/staticphp-documentation-syncType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add crazywhalecc/static-php-cli --skill staticphp-documentation-sync -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install crazywhalecc/static-php-cli staticphp-documentation-sync --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/crazywhalecc/static-php-cli.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/staticphp-documentation-sync .agents/skills/staticphp-documentation-sync && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "staticphp-documentation-sync" agent skill from https://github.com/crazywhalecc/static-php-cli/tree/v3/.agents/skills/staticphp-documentation-sync into .agents/skills/staticphp-documentation-sync/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "staticphp-documentation-sync", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add crazywhalecc/static-php-cli --skill staticphp-documentation-sync -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install crazywhalecc/static-php-cli staticphp-documentation-sync --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/crazywhalecc/static-php-cli.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/staticphp-documentation-sync .cursor/skills/staticphp-documentation-sync && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "staticphp-documentation-sync" agent skill from https://github.com/crazywhalecc/static-php-cli/tree/v3/.agents/skills/staticphp-documentation-sync into .cursor/skills/staticphp-documentation-sync/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "staticphp-documentation-sync", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/crazywhalecc/static-php-cli.git --path .agents/skills/staticphp-documentation-sync--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add crazywhalecc/static-php-cli --skill staticphp-documentation-sync -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install crazywhalecc/static-php-cli staticphp-documentation-sync --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/crazywhalecc/static-php-cli.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/staticphp-documentation-sync .gemini/skills/staticphp-documentation-sync && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "staticphp-documentation-sync" agent skill from https://github.com/crazywhalecc/static-php-cli/tree/v3/.agents/skills/staticphp-documentation-sync into .gemini/skills/staticphp-documentation-sync/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "staticphp-documentation-sync", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install crazywhalecc/static-php-cli staticphp-documentation-syncInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add crazywhalecc/static-php-cli --skill staticphp-documentation-sync -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/crazywhalecc/static-php-cli.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/staticphp-documentation-sync .github/skills/staticphp-documentation-sync && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "staticphp-documentation-sync" agent skill from https://github.com/crazywhalecc/static-php-cli/tree/v3/.agents/skills/staticphp-documentation-sync into .github/skills/staticphp-documentation-sync/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "staticphp-documentation-sync", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add crazywhalecc/static-php-cli --skill staticphp-documentation-sync -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install crazywhalecc/static-php-cli staticphp-documentation-sync --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/crazywhalecc/static-php-cli.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/staticphp-documentation-sync .opencode/skills/staticphp-documentation-sync && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "staticphp-documentation-sync" agent skill from https://github.com/crazywhalecc/static-php-cli/tree/v3/.agents/skills/staticphp-documentation-sync into .opencode/skills/staticphp-documentation-sync/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "staticphp-documentation-sync", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
staticphp-documentation-syncSynchronize bilingual documentation when StaticPHP v3 user-facing or developer-facing documentation must change.
Staticphp Documentation Sync is an agent skill from crazywhalecc/static-php-cli. Synchronize bilingual documentation when StaticPHP v3 user-facing or developer-facing documentation must change. Use when adding, modifying, deprecating, or removing documented features, CLI commands/options, environment variables, configuration formats, public APIs/extension points, workflows, installation requirements, migration guidance, or user-visible behavior. Do not use solely for internal implementation changes, package/library additions, or build bug fixes unless they change documented behavior or…
Its SKILL.md is about 2.2k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Development, covering Translation, Debugging and Secrets management. It works with PHP. The repository describes itself as: Build standalone portable PHP binaries on Linux, macOS, Windows, with PHP project together, with popular extensions included. The licence is MIT.
5 steps, taken from the step headings in SKILL.md.
Read from SKILL.md and the folder at commit f60c636. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
npmFrom the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md. Its commands use npm, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Staticphp Documentation Sync loads about 2.2k tokens when it runs. Until then it costs about 143 tokens; SKILL.md has 676 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from crazywhalecc/static-php-cli at commit f60c636, republished under its MIT licence (© crazywhalecc). 676 words, ~2,235 tokens.
.claude/skills/staticphp-documentation-sync/SKILL.md (or your agent's skills folder).StaticPHP maintains bilingual documentation under docs/en/ (English) and docs/zh/ (Chinese). User-facing or developer-facing documentation changes must be reflected in both languages. Use this skill to identify affected docs, update them in sync, and validate sidebar/config consistency.
Invoke this skill when the change involves:
Do not update docs just because code changed. Internal refactors, new libraries used only as dependencies, package build fixes, CI-only changes, and bug fixes that preserve documented behavior usually do not need documentation changes. If existing docs mention the changed behavior, command, package support, dependency, caveat, or workaround, update them.
docs/
├── en/ # English docs (canonical source)
│ ├── index.md # Home page hero/features
│ ├── guide/ # User-facing guides
│ │ ├── index.md # Overview
│ │ ├── installation.md # Installation instructions
│ │ ├── first-build.md # First build walkthrough
│ │ ├── sapi-reference.md # PHP SAPI options
│ │ ├── cli-reference.md # CLI commands and options
│ │ ├── cli-generator.md # Build command generator
│ │ ├── migrate-from-v2.md # v2 → v3 migration
│ │ ├── extensions.md # Supported extensions list
│ │ ├── extension-notes.md # Per-extension notes
│ │ ├── env-vars.md # Environment variables
│ │ ├── deps-map.md # Dependency map
│ │ └── troubleshooting.md # Troubleshooting guide
│ ├── develop/ # Developer docs
│ │ ├── index.md # Dev overview
│ │ ├── structure.md # Project structure
│ │ ├── registry.md # Registry model
│ │ ├── package-model.md # Package YAML model
│ │ ├── artifact-model.md # Artifact YAML model
│ │ ├── craft-yml.md # craft.yml reference
│ │ ├── build-lifecycle.md # Build stages/lifecycle
│ │ ├── system-build-tools.md # System tool requirements
│ │ ├── doctor-module.md # Doctor module
│ │ ├── php-src-changes.md # PHP source patches
│ │ └── extending/ # Extension authoring
│ │ ├── index.md
│ │ ├── package-classes.md
│ │ ├── annotations.md
│ │ ├── lifecycle-hooks.md
│ │ ├── dependency-injection.md
│ │ └── custom-artifact.md
│ ├── contributing/
│ │ └── index.md
│ └── faq/
│ └── index.md
├── zh/ # Chinese docs (mirrors en/ structure)
│ └── (same structure as en/)
├── .vitepress/
│ ├── sidebar.en.ts # English sidebar config
│ ├── sidebar.zh.ts # Chinese sidebar config
│ └── config.ts # VitePress site config
└── deps-craft-yml.md # Shared craft.yml include used by both languagesOther documentation files outside this tree may also matter, especially root-level ext-support.md.
Key rule: docs/en/ and docs/zh/ have identical file trees. Every .md file under en/ must have a corresponding file under zh/.
Map the change to affected documentation:
| Change Type | Likely Affected Docs |
|---|---|
| New/removed CLI command | guide/cli-reference.md, guide/cli-generator.md |
| New/removed CLI option | guide/cli-reference.md, guide/first-build.md |
| New env var | guide/env-vars.md |
| New/removed documented extension package | guide/extensions.md, guide/extension-notes.md, guide/deps-map.md, root ext-support.md |
| Package config field change | develop/package-model.md, develop/artifact-model.md |
| Build lifecycle change | develop/build-lifecycle.md |
| Doctor change | develop/doctor-module.md, develop/system-build-tools.md |
| New attribute/hook/DI | develop/extending/annotations.md, develop/extending/lifecycle-hooks.md, develop/extending/dependency-injection.md |
| PHP source patch | develop/php-src-changes.md |
| Registry change | develop/registry.md |
| Install/setup change | guide/installation.md, guide/first-build.md |
| Deprecation/removal | All docs referencing the feature |
| New doc page | sidebar.en.ts, sidebar.zh.ts |
Before editing, read BOTH the English and Chinese versions of each affected file to understand the current content and existing translation patterns.
# Example: check both language versions of the CLI reference
cat docs/en/guide/cli-reference.md
cat docs/zh/guide/cli-reference.mddocs/en/ files with accurate, complete English content.docs/en/<category>/<name>.mddocs/.vitepress/sidebar.en.tsdocs/zh/ files to match the English changes.docs/zh/ file and update docs/.vitepress/sidebar.zh.ts.docs/deps-craft-yml.md as a special shared include for both languages. If it needs prose changes, either keep the shared content acceptable for both languages or split the included content before adding language-specific prose.Run these checks before considering the task complete:
# Check that en/ and zh/ have matching file trees
diff <(find docs/en -name '*.md' | sed 's|docs/en/||' | sort) \
<(find docs/zh -name '*.md' | sed 's|docs/zh/||' | sort)
# Check that all sidebar links point to existing files
# (manual check: every 'link' in sidebar.*.ts must resolve to an actual .md file)
# Build docs when Node dependencies are available; this catches many broken links/config issues
npm run docs:builddocs/zh/./zh/... paths (not /en/...).en/ and zh/ in the same change.sidebar.en.ts and sidebar.zh.ts.ext-support.md and docs/deps-craft-yml.md are also documentation. Update them if relevant.© crazywhalecc, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Just SKILL.md in .agents/skills/staticphp-documentation-sync of crazywhalecc/static-php-cli.
Open the folder on GitHubat commit f60c636
Staticphp Documentation Sync next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Staticphp Documentation Sync this skillcrazywhalecc/static-php-cli | 1.9k | — | ~2.2k | Automated safety check: Pass | MIT | |
| Security Reviewgithub/awesome-copilot | 40k | 1 repos | ~2.3k | Automated safety check: Notes | MIT | |
| Wp Interactivity APIAutomattic/agent-skills | 211 | 2 repos | ~1.5k | Automated safety check: Pass | None | |
| Extension Puppeteer Debuggingmengxi-ream/read-frog | 10k | — | ~2k | Automated safety check: Notes | GPL-3.0 | |
| I18n Lang FilesMes-Open/OpenMes | 150 | — | ~1.1k | Automated safety check: Pass | AGPL-3.0 | |
| Wp PlaygroundAutomattic/agent-skills | 211 | 1 repos | ~1.2k | Automated safety check: Pass | None |
github/awesome-copilot
AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching…
Automattic/agent-skills
A skill your agent uses when building or debugging WordPress Interactivity API features (data-wp- directives, @wordpress/interactivity store/state/actions, block viewScriptModule integration…
mengxi-ream/read-frog
Debug the built Read Frog extension in real Chrome. An agent skill from mengxi-ream/read-frog.
Mes-Open/OpenMes
Editing or merging backend/lang/en.json and pl.json. An agent skill from Mes-Open/OpenMes.
Automattic/agent-skills
A skill your agent uses for WordPress Playground workflows: fast disposable WP instances in the browser or locally via @wp-playground/cli (server, run-blueprint, build-snapshot), auto-mounting…
Cod-e-Codes/marchat
Diagnoses marchat client and server issues using -doctor, env configuration, and logs.
crazywhalecc/static-php-cli
Diagnose StaticPHP v3 failures. An agent skill from crazywhalecc/static-php-cli.
crazywhalecc/static-php-cli
Maintain StaticPHP v3 packages and artifacts. An agent skill from crazywhalecc/static-php-cli.
Works with
Categories
Synchronize bilingual documentation when StaticPHP v3 user-facing or developer-facing documentation must change. Staticphp Documentation Sync is an agent skill from crazywhalecc/static-php-cli. Synchronize bilingual documentation when StaticPHP v3 user-facing or developer-facing documentation must change.
Staticphp Documentation Sync fits situations like: removing documented features; CLI commands/options; environment variables; configuration formats.
Run `npx skills add crazywhalecc/static-php-cli --skill staticphp-documentation-sync -a claude-code`. Or copy the skill folder (.agents/skills/staticphp-documentation-sync in crazywhalecc/static-php-cli) into .claude/skills/staticphp-documentation-sync in your project. Claude Code loads it when a task matches its description.
Run `npx skills add crazywhalecc/static-php-cli --skill staticphp-documentation-sync -a codex`. Or copy the skill folder (.agents/skills/staticphp-documentation-sync in crazywhalecc/static-php-cli) into .agents/skills/staticphp-documentation-sync in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add crazywhalecc/static-php-cli --skill staticphp-documentation-sync -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/staticphp-documentation-sync, .gemini/skills/staticphp-documentation-sync, .github/skills/staticphp-documentation-sync and .opencode/skills/staticphp-documentation-sync in your project.
Going by SKILL.md and its folder, Staticphp Documentation Sync needs the command-line tools its instructions call (npm).
SKILL.md contains no URLs. Its commands use npm, which can reach the network depending on how they are called. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Staticphp Documentation Sync is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 2.2k tokens (SKILL.md is roughly 8.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Staticphp Documentation Sync: Security Review (github/awesome-copilot, 40k stars), Wp Interactivity API (Automattic/agent-skills, 211 stars), Extension Puppeteer Debugging (mengxi-ream/read-frog, 10k stars) and I18n Lang Files (Mes-Open/OpenMes, 150 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
crazywhalecc (a GitHub user) maintains it in crazywhalecc/static-php-cli, which has 1,949 GitHub stars. The repository holds 3 skills in this directory. The repository was last updated on October 7, 2026.
Source: crazywhalecc/static-php-cli on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.