php-route-mapper

Extract PHP web routes and parameter structures into Markdown files.

386|38|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/0xShe/PHP-Code-Audit-Skill --skill php-route-mapper-0xshe
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: php-route-mapper
Source: https://github.com/0xShe/PHP-Code-Audit-Skill/tree/main/php-route-mapper
Command: npx skills add https://github.com/0xShe/PHP-Code-Audit-Skill --skill php-route-mapper-0xshe

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill analyzes PHP web projects to extract all entry routes and their parameter structures from source code, generating complete request templates and parameter inventories to support thorough security testing.

Core Features & Use Cases

  • Comprehensive route discovery across frameworks (Laravel, Symfony, Slim, WordPress) and front controllers.
  • Complete parameter mapping for path, query, body, headers, cookies, and files with constraints.
  • Deterministic outputs: outputs both route_mapping and params markdown files ready for pipeline integration.

Quick Start

Provide the PHP project source path to the skill and run; it will produce route_mapping and params markdown files.

Frequently Asked Questions about php-route-mapper

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract PHP routes and parameters from source code for security testing?

Yes, route extraction supports multiple PHP frameworks including Laravel, Symfony, Slim, and WordPress, alongside standard front controllers, to ensure comprehensive mapping across diverse project architectures.

What is the best way to map PHP web routes and parameter structures before a release?

Mapped parameters include path variables, query strings, body payloads, headers, cookies, and files, along with their specific constraints, providing a full request template for thorough security testing.

How do I generate a complete route list for a PHP project audit?

The main limitation is that it requires direct access to the project's source code; it cannot extract routes from compiled binaries or deployed applications without the original PHP files.

Does PHP route extraction work with Laravel and Symfony frameworks?

Yes, route extraction supports multiple PHP frameworks including Laravel, Symfony, Slim, and WordPress, alongside standard front controllers, to ensure comprehensive mapping across diverse project architectures.

What parameter types are mapped during PHP source code analysis?

Mapped parameters include path variables, query strings, body payloads, headers, cookies, and files, along with their specific constraints, providing a full request template for thorough security testing.

Can I integrate extracted PHP route mappings into a CI/CD pipeline?

Yes, the extraction outputs deterministic route_mapping and params Markdown files, which are designed for pipeline integration to automate pre-release security reviews and continuous vulnerability verification.