php-security-review

Identify and report OWASP Top 10 2021 vulnerabilities in PHP applications.

Updated Feb 5, 2026
One-click install
npx skills add https://github.com/benjaminhaeberli/claude-plugins --skill php-security-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: php-security-review
Source: https://github.com/benjaminhaeberli/claude-plugins/tree/main/skills/php/php-security-review
Command: npx skills add https://github.com/benjaminhaeberli/claude-plugins --skill php-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers and security engineers assess PHP-based apps for security vulnerabilities and OWASP compliance by inspecting code, configurations, and dependencies.

Core Features & Use Cases

  • Automated OWASP Top 10 aware security audit across PHP projects (Laravel, Kirby, Livewire, Blade)
  • Checks configuration handling, dependencies, and common risk areas to surface actionable findings
  • Generates a structured audit report with prioritized remediation and an actionable plan
  • Use Case: You want to harden a PHP Laravel application by identifying insecure patterns and producing remediation steps

Quick Start

Provide the PHP project you want audited and request a comprehensive security review against OWASP Top 10 2021.

Frequently Asked Questions about php-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP Top 10 security audit on a Laravel application?

A security audit for a Laravel application analyzes code paths, configuration handling, and dependencies against OWASP Top 10 2021. It generates a structured audit report with prioritized remediation and an actionable plan to harden the application.

Can I scan Kirby and Livewire projects for PHP-specific security vulnerabilities?

Yes, you can scan Kirby and Livewire projects for PHP-specific security vulnerabilities. The audit applies to PHP, Laravel, Kirby, Livewire, and Blade projects, analyzing code paths and configurations to surface actionable findings.

What is the best way to harden PHP applications against common security risks?

The best way to harden PHP applications is to conduct a structured security review based on OWASP Top 10 2021 and PHP-specific best practices. This process inspects code, configurations, and dependencies to produce an actionable hardening plan.

Does a PHP code audit check configuration handling and dependency risks?

Yes, a PHP code audit checks configuration handling and dependency risks. It analyzes code paths, configurations, and common risk areas based on OWASP Top 10 2021 to identify vulnerabilities and generate a prioritized remediation report.

How do I get prioritized remediation steps for insecure PHP code patterns?

To get prioritized remediation steps for insecure PHP code patterns, request a comprehensive security review against OWASP Top 10 2021. The audit identifies vulnerabilities and produces a structured report with an actionable plan for hardening.