php-exploit-chain-audit

Aggregate PHP vulnerability audit reports into end-to-end exploit chains narratives.

386|38|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/0xShe/PHP-Code-Audit-Skill --skill php-exploit-chain-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: php-exploit-chain-audit
Source: https://github.com/0xShe/PHP-Code-Audit-Skill/tree/main/php-exploit-chain-audit
Command: npx skills add https://github.com/0xShe/PHP-Code-Audit-Skill --skill php-exploit-chain-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Aggregates vulnerability audit reports into cross-stage exploit chains, turning isolated findings into coherent end-to-end narratives without creating new evidence dictionaries.

Core Features & Use Cases

  • Cross-skill chaining: link vuln_audit and auth_audit reports by preconditions to form exploitation chains.
  • Narrative output: produce chain narratives suitable for risk assessment and remediation planning.
  • Evidence contract compliance: reuse existing evidence dictionaries and avoid introducing new ones.

Quick Start

Aggregate vuln_audit reports into exploit chains and output to exploit_chain/exploit_chains_<timestamp>.md.

Frequently Asked Questions about php-exploit-chain-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I aggregate isolated PHP vulnerability findings into end-to-end exploit chains?

You aggregate PHP vulnerability audit reports by linking cross-stage preconditions from isolated findings to form coherent end-to-end exploit chains suitable for risk assessment and remediation planning.

What is an exploit chain narrative in PHP security analysis?

An exploit chain narrative in PHP security analysis links isolated vulnerability audit findings via preconditions, turning fragmented evidence into structured end-to-end exploitation paths for remediation planning.

Can I link auth_audit and vuln_audit reports together to form exploitation chains?

Yes, you can link auth_audit and vuln_audit reports. The aggregation process correlates preconditions across these security assessment outputs to form interconnected cross-skill exploitation chains.

Does the PHP exploit chain aggregation introduce new evidence dictionaries?

No, PHP exploit chain aggregation does not introduce new evidence dictionaries. It strictly adheres to established chain-building rules and reuses existing evidence contracts from the original audit inputs.

How do I output aggregated exploit chains for PHP security assessments?

You output aggregated exploit chains by processing linked audit reports into narrative markdown files, saving the end-to-end exploitation chain results into a timestamped document for remediation planning.

Do I need existing vuln_audit inputs before generating PHP exploit chain narratives?

Yes, you need existing vuln_audit inputs before generating PHP exploit chain narratives. The aggregation relies entirely on existing vulnerability audit reports to build cross-stage exploitation paths.