php-expr-audit

What problem does it solve?

This skill analyzes PHP source code to identify user-controlled expressions that reach expression engines or PHP dynamic execution points, enabling potential code execution or secret logic manipulation.

Core Features & Use Cases

• Detects expression evaluation or compilation entry points such as ExpressionLanguage->evaluate({value}) and ExpressionLanguage->compile({value}) as well as PHP runtime execution via eval($code) and assert($assertion) when user input can influence code.
• Identifies sources of user-controlled input that feed into expression strings and checks for unsafe concatenation or over-permissive evaluation contexts.
• Provides structured reports with severity ratings, PoC guidance, and remediation recommendations for common PHP expression injection patterns in code reviews or CI pipelines.

Quick Start

Run the PHP expression-audit scanner against your codebase to locate and report all expression-evaluation entry points.