Analyze PHP source code and configuration for security vulnerabilities and unsafe practices.
npx skills add https://github.com/pruiz/CodeCome --skill php-security-pruiz
Please help me install this Agent Skill. Skill: php-security Source: https://github.com/pruiz/CodeCome/tree/main/.opencode/skills/php-security Command: npx skills add https://github.com/pruiz/CodeCome --skill php-security-pruiz
This Skill helps identify security flaws and dangerous practices in PHP codebases, preventing exploitation and data breaches.
Use the php-security skill to analyze your PHP project directory for security weaknesses and risky code patterns.
High-intent search queries and answers about installing and using this skill.
Scanning PHP source code for SQL injection and remote code execution involves analyzing risky functions, insecure configurations, and unsafe deserialization patterns to identify common attack vectors and enforce security best practices.
Auditing a legacy PHP application for security misconfigurations requires evaluating server settings, error reporting, and session management to detect unsafe functions and insecure dependencies before deployment.
PHP deserialization analysis prevents security flaws by identifying unsafe deserialization patterns in source code, which are common attack vectors for remote code execution and data breaches.
Automated code review can evaluate PHP project directories to find insecure dependencies, dangerous functions, and misconfigured application settings by applying best security standards.
When reviewing PHP session management and error reporting, you should check for insecure configurations and risky code patterns that expose vulnerabilities and lead to exploitation.
Static analysis for detecting insecure practices in PHP web applications focuses on source code and configuration, identifying known attack classes like injection and remote code execution, but may not catch runtime exploitation.
alicanerdoganScan codebases for conventions and security concerns.
foutoucourIdentify OWASP Top 10 security vulnerabilities in application code.
tonnychiulabAnalyze WordPress PHP code for SQL injection, XSS, and permission vulnerabilities.
zebbernIdentifies and exploits file path traversal vulnerabilities in web applications.
