php-file-audit

Name: php-file-audit
Availability: InStock
Author: yunmengya

Audits PHP code for security vulnerabilities in file operations.

80|6|Updated Feb 27, 2026

Search Tags:#code review #security #vulnerability #php #web application #file audit

Ready to run

npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill php-file-audit

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: php-file-audit
Source: https://github.com/yunmengya/PHP_AUDIT_SKILLS/tree/main/php-file-audit
Command: npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill php-file-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill addresses security vulnerabilities related to file operations in PHP applications, including upload, read, write, delete, include, and unzip risks.

Core Features & Use Cases

File Operation Security: Audits common file-related vulnerabilities in PHP code.
Evidence-Based Findings: Provides detailed evidence chains and Proof of Concept (PoC) templates for identified risks.
Use Case: Secure a PHP web application by identifying and mitigating risks associated with user-uploaded files, directory traversal, and arbitrary file reads/writes.

Quick Start

Use the php-file-audit skill to audit file upload risks in the provided PHP project directory.

Frequently Asked Questions about php-file-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit PHP code for file upload and directory traversal vulnerabilities?▼

Auditing PHP code for file upload and directory traversal vulnerabilities involves tracing data flow from source to sink across file operations while evaluating sanitization logic to identify security risks and generate evidence chains.

What security risks exist in PHP file include and unzip operations?▼

PHP file include and unzip operations carry risks like arbitrary code execution and path traversal. Auditing these operations requires analyzing how user input reaches these sinks and whether existing filtering adequately prevents unauthorized file access.

How do I generate a PoC template for PHP arbitrary file read or write vulnerabilities?▼

Generating a PoC template for PHP arbitrary file read or write vulnerabilities requires tracing malicious input data flow to the file operation sink, verifying insufficient sanitization, and producing an evidence chain demonstrating the exploit path.

Does this PHP file audit approach detect vulnerabilities in delete and write operations?▼

Yes, this PHP file audit approach detects vulnerabilities in delete and write operations by tracing user-controlled input data to these specific sinks, analyzing sanitization logic, and generating evidence chains for identified security risks.

Can I audit a specific PHP project directory for file operation security risks?▼

Yes, you can audit a specific PHP project directory for file operation security risks by scanning the codebase to trace data flow from sources to file operation sinks and evaluating the applied filtering logic.