skills.rest
yunmengya
yunmengyaCOMMUNITY
Explore all skills by this author →
GitHub

composer-audit-mcp

Scan PHP project dependencies for known vulnerabilities using Composer audit.

80|6|Updated Feb 27, 2026
Search Tags:#php#vulnerability assessment#security audit#mcp#composer#dependency scanning
One-click install
npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill composer-audit-mcp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: composer-audit-mcp
Source: https://github.com/yunmengya/PHP_AUDIT_SKILLS/tree/main/composer-audit-mcp
Command: npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill composer-audit-mcp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the process of scanning PHP project dependencies for known security vulnerabilities, providing normalized results and reports.

Core Features & Use Cases

  • Dependency Vulnerability Scanning: Utilizes composer audit to identify known security flaws in project dependencies.
  • Normalized Output: Generates results in a standardized MCP (Metadata and Control Plane) format for easier integration.
  • Reporting: Produces both raw JSON and human-readable Markdown reports detailing identified vulnerabilities.
  • Use Case: Before deploying a PHP application, run this Skill to ensure all its dependencies are free from known security risks, preventing potential breaches.

Quick Start

Use the composer-audit-mcp skill to scan dependencies for the PHP project located at /path/to/php_project.

Frequently Asked Questions about composer-audit-mcp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan PHP dependencies for known security vulnerabilities?▼

To scan PHP dependencies for vulnerabilities, you can use the composer audit command. This skill automates dependency vulnerability scanning for PHP projects and outputs normalized MCP results in both JSON and Markdown report formats.

What do I need to run a composer audit on my PHP project?▼

To run a composer audit, your PHP project requires a composer.lock file. You also need Python 3 installed, along with either a system-wide Composer installation or the bundled composer.phar file.

Can I get standardized MCP results from a PHP security audit?▼

Yes, you can get standardized MCP results from a PHP security audit. This skill normalizes the vulnerability scanning output into an MCP format, alongside generating raw JSON and human-readable Markdown reports.

When should I perform a dependency vulnerability scan on my PHP application?▼

You should perform a dependency vulnerability scan on your PHP application before deployment. Scanning your project dependencies ensures they are free from known security risks, preventing potential breaches.

Does dependency scanning work without a system-wide Composer installation?▼

Yes, dependency scanning works without a system-wide Composer installation. The skill can execute the audit process using a bundled composer.phar file, provided Python 3 and a composer.lock file are present.

Related Skills

Explore More Software Engineering Skills→
yunmengyayunmengya
80

php-vuln-scanner

Scan composer.lock files to identify known PHP dependency vulnerabilities.

Community
Basic
yunmengyayunmengya
80

ai-audit-mcp

Audit code contexts to identify and report exploitability findings.

Community
Advanced
devendrapratapsinghdevendrapratapsingh
1

app-security

Scan application code for vulnerabilities and hardcoded secrets.

Community
Advanced
hamzaPixlhamzaPixl
2

security-scan

Scan code repositories and container images for secrets, OWASP Top 10 vulnerabilities, dependency CVEs, and RBAC misconfigurations.

Community
Intermediate