Audit PHP projects for SQL injection vulnerabilities with JSON and Markdown reports.
npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill php-sql-audit
Please help me install this Agent Skill. Skill: php-sql-audit Source: https://github.com/yunmengya/PHP_AUDIT_SKILLS/tree/main/php-sql-audit Command: npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill php-sql-audit
This Skill automates the process of auditing PHP code for SQL injection vulnerabilities, ensuring secure coding practices and providing detailed, actionable reports.
Use the php-sql-audit skill to audit the provided PHP project for SQL injection vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To audit PHP code for SQL injection, this Skill analyzes route mappings, traces data flow from source to sink, and validates sanitization mechanisms to output standardized findings with remediation advice.
Static analysis detects SQL injection by tracing data flow to identify source-to-sink evidence chains and validating whether existing sanitization and escape mechanisms effectively prevent the vulnerability.
Yes, you can generate proof-of-concept templates. The audit outputs standardized findings in JSON and Markdown formats, which include evidence chains, validation checks, and proof-of-concept templates.
The best way to verify sanitization functions is by running an audit that validates escape mechanisms and traces source-to-sink data flow, providing a prioritized list of findings with remediation steps.
Yes, the SQL injection audit works for large PHP codebases by automating static analysis to quickly scan routes, trace data flow, and identify vulnerabilities, ensuring secure coding practices at scale.
limzivectorAutomate security auditing and OWASP Top 10 compliance checks.
MetalLegBobAnalyze code changes for security risks using git history and test coverage.
IndustrialAnalyze code for security vulnerabilities and performance issues.
AnsteorraPerform static and dynamic security audits on the KMP application.
