php-var-override-audit

Audits PHP variable override risks by tracing controllable inputs and logging evidence chains.

80|6|Updated Feb 27, 2026
One-click install
npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill php-var-override-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: php-var-override-audit
Source: https://github.com/yunmengya/PHP_AUDIT_SKILLS/tree/main/php-var-override-audit
Command: npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill php-var-override-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill identifies and audits risks associated with variable overriding in PHP applications, ensuring that critical variables are not unintentionally or maliciously altered.

Core Features & Use Cases

  • Risk Identification: Locates high-risk variable overwriting patterns and dynamic assignment scenarios.
  • Input Control Tracking: Traces whether controllable inputs can overwrite sensitive variables.
  • Evidence Logging: Records the chain of evidence and conclusions regarding controllability.
  • Use Case: When auditing a PHP e-commerce platform, this skill can detect if user-supplied parameters can be used to override internal variables that control pricing or order processing, preventing fraudulent transactions.

Quick Start

Use the php-var-override-audit skill to audit variable override risks in the provided PHP project.

Frequently Asked Questions about php-var-override-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a PHP variable override vulnerability?

A PHP variable override vulnerability occurs when controllable user inputs dynamically overwrite critical internal variables. This skill traces controllable inputs to identify high-risk dynamic assignment patterns and logs evidence chains determining if sensitive variables can be maliciously altered.

How do I audit PHP code for variable override risks?

To audit PHP variable override risks, use this skill to scan your project for high-risk overwriting patterns and dynamic assignments. It aligns with a phased methodology from Phase 1 to 5, generating specific outputs for findings and reports.

How does dynamic analysis trace controllable inputs in PHP applications?

Dynamic analysis traces controllable inputs by logging evidence chains and controllability conclusions throughout PHP execution. It identifies if user-supplied parameters can dynamically overwrite sensitive variables that control critical processes like pricing or order handling.

Can this security audit detect if user inputs overwrite critical e-commerce variables?

Yes, this security audit detects if user-supplied parameters can overwrite critical variables. In PHP e-commerce platforms, it specifically checks if controllable inputs can alter internal variables controlling pricing or order processing to prevent fraudulent transactions.

What are the limitations of detecting dynamic variable assignment vulnerabilities in PHP?

Detection of dynamic variable assignment vulnerabilities relies on tracing controllable inputs to critical variables. Limitations involve accurately mapping complex dynamic assignment patterns and ensuring all high-risk variable overwriting scenarios are fully captured within the phased audit methodology.

Do I need specific dependencies to perform a PHP variable override audit?

No specific dependencies are required to perform a PHP variable override audit. The skill operates independently using its internal references and scripts to locate high-risk dynamic assignment patterns and trace controllable inputs in your PHP application.