skills.rest
yunmengya
yunmengyaCOMMUNITY
Explore all skills by this author →
GitHub

php-vuln-scanner

Scan composer.lock files to identify known PHP dependency vulnerabilities.

80|6|Updated Feb 27, 2026
Search Tags:#security#php#dependency analysis#composer#vulnerability scanning#composer.lock
One-click install
npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill php-vuln-scanner
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: php-vuln-scanner
Source: https://github.com/yunmengya/PHP_AUDIT_SKILLS/tree/main/php-vuln-scanner
Command: npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill php-vuln-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires composer-audit-mcp, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need to identify known security vulnerabilities within the dependencies of PHP projects by analyzing the composer.lock file.

Core Features & Use Cases

  • Dependency Vulnerability Scanning: Leverages composer-audit-mcp to detect known CVEs in project dependencies.
  • Report Generation: Outputs a comprehensive vulnerability report in both JSON and Markdown formats.
  • Use Case: Before deploying a PHP application, run this Skill to proactively identify and address any security risks introduced by third-party libraries, ensuring a more secure codebase.

Quick Start

Use the php-vuln-scanner skill to scan the composer.lock file in the current project directory for vulnerabilities.

Frequently Asked Questions about php-vuln-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan PHP dependencies for known security vulnerabilities?▼

To scan PHP dependencies for vulnerabilities, this Skill analyzes your composer.lock file to identify and report known CVEs in project dependencies. It generates a comprehensive vulnerability report in both JSON and Markdown formats.

What is the best way to check a composer.lock file for CVEs before deployment?▼

Checking a composer.lock file for CVEs is best handled by running this Skill to proactively identify security risks introduced by third-party libraries. It leverages composer-audit-mcp to ensure a more secure codebase before deployment.

Does PHP vulnerability scanning require any specific tools or environments?▼

PHP vulnerability scanning requires the composer-audit-mcp tool to function properly. You must have a valid composer.lock file in your current project directory for the dependency analysis to successfully process.

Can I generate a vulnerability report in Markdown and JSON for a PHP project?▼

You can generate a vulnerability report in Markdown and JSON formats by running this Skill against your PHP project. It uses composer-audit-mcp to output comprehensive dependency security findings directly in both formats.

When do I need to perform dependency analysis on a PHP codebase?▼

Dependency analysis is needed when you want to proactively identify security risks from third-party libraries before deploying a PHP application. It audits the composer.lock file to detect known CVEs in your project dependencies.

Related Skills

Explore More Software Engineering Skills→
ConductionNLConductionNL
1

hydra-gate-composer-audit

Audit PHP composer dependencies for known CVEs in CI/CD pipelines.

Official
Intermediate
0xShe0xShe
386

php-vuln-scanner

Scan composer.json and composer.lock for known PHP dependency vulnerabilities.

Community
Advanced
Ramprasad4121Ramprasad4121
1

audit-prep-assistant

Prepare codebases for security review with static analysis and documentation.

Community
Advanced
softsparksoftspark
161

cve-scan

Detect known CVEs in project dependencies using native package manager audit tools.

Community
Intermediate