califiocalifioOfficialยท1 Agent Skills Included

skills

Audit PHP deserialization code for exploitable memory bugs

Audits PHP engine deserialization surfaces for use-after-free, type confusion, heap overflow, and partial-object destructor bugs. Replaces slow manual code review with structured grep heuristics, target discovery queries, and a proven bug taxonomy from real advisories. Coordinates parallel verification passes so security researchers confirm exploitable findings faster.
npx skills add califio/skills --all -g -y

All Skills in This Repository (1)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install califio skills?โ–ผ

Run `npx skills add califio/skills --all -g -y` in your terminal to install all skills in this collection globally.

What does the php-unserialize-audit skill do?โ–ผ

It systematically audits PHP's unserialize, session, WDDX, and phar code paths for memory-safety bugs like use-after-free and type confusion, using a checklist derived from real CVE advisories.

Who should use this security auditing skill?โ–ผ

Security researchers and engineers reviewing the PHP engine source code for exploitable deserialization vulnerabilities, especially in PHP 5.x and 7.x.

Does it work with Claude Code and Codex?โ–ผ

Yes. The skills follow the standard SKILL.md format and run in Claude Code, Codex, and other compatible coding environments.

Do I need to be a PHP internals expert to use it?โ–ผ

No. The skill provides ready-made search queries, a bug taxonomy, and verification steps so your agent handles the deep engine analysis for you.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’