skills
Audit PHP deserialization code for exploitable memory bugs
All Skills in This Repository (1)
Pure Emerald Level IndicatorsFrequently Asked Questions
FAQPage SchemaHow to install califio skills?โผ
Run `npx skills add califio/skills --all -g -y` in your terminal to install all skills in this collection globally.
What does the php-unserialize-audit skill do?โผ
It systematically audits PHP's unserialize, session, WDDX, and phar code paths for memory-safety bugs like use-after-free and type confusion, using a checklist derived from real CVE advisories.
Who should use this security auditing skill?โผ
Security researchers and engineers reviewing the PHP engine source code for exploitable deserialization vulnerabilities, especially in PHP 5.x and 7.x.
Does it work with Claude Code and Codex?โผ
Yes. The skills follow the standard SKILL.md format and run in Claude Code, Codex, and other compatible coding environments.
Do I need to be a PHP internals expert to use it?โผ
No. The skill provides ready-made search queries, a bug taxonomy, and verification steps so your agent handles the deep engine analysis for you.
Related Repositories in Software Engineering
View All in Software Engineeringโopenclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core