Trace PHP route execution paths and parameter flow to data sinks.
npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill php-route-tracer
Please help me install this Agent Skill. Skill: php-route-tracer Source: https://github.com/yunmengya/PHP_AUDIT_SKILLS/tree/main/php-route-tracer Command: npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill php-route-tracer
This Skill automates the complex process of tracing execution paths and data flow within PHP applications, starting from defined routes.
/users/profile, this Skill will generate a report detailing every function called, how user input flows into those functions, and where that input is ultimately used, highlighting any sanitization or validation steps.Use the php-route-tracer skill to trace the call chain and parameter flow for the route '/api/v1/users'.
High-intent search queries and answers about installing and using this skill.
To trace PHP route execution paths and data flow, you provide the project root directory and optionally a routes.json file. The tool maps controller actions, cross-file calls, and parameter propagation to identify data sinks.
Taint analysis tracks how external data moves from sources through variables to final sinks, pinpointing critical code points where unsanitized input is used. It generates verifiable evidence chains highlighting validation logic for security auditing.
Generate verifiable evidence chains by analyzing controller actions and cross-file function calls originating from defined routes. The output details the source, taint propagation, sinks, and associated validation steps for each path.
You do not strictly need a routes.json file to perform parameter flow analysis, as providing the project root directory is required, but supplying a routes.json file optionally helps define specific entry points for tracing.
The best way to audit cross-file method calls is to trace call chains starting from a specific route. This maps the sequence of function calls and tracks user input propagation through variables to its ultimate use.
Ayub-KhanMap codebase structure and trace dependencies using grep and glob.
yunmengyaAudits PHP code for security vulnerabilities in file operations.
Till-Crazy-Tears-Us-ApartGenerate semantic summaries of Python code using AST and LLM analysis.
abhijeetkakade1234Trace data flow from untrusted inputs to dangerous sinks and fix vulnerabilities.