Audit PHP code for SQL injection, XSS, CSRF, and authentication flaws.
npx skills add https://github.com/a-jay85/IBL5 --skill security-audit-a-jay85
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/a-jay85/IBL5/tree/main/.claude/skills/security-audit Command: npx skills add https://github.com/a-jay85/IBL5 --skill security-audit-a-jay85
This Skill helps identify and prevent common security vulnerabilities in PHP code, ensuring the integrity and safety of the IBL5 application.
Audit the provided code snippet for security vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To audit PHP code for security vulnerabilities, you review code snippets to identify common attack patterns like SQL injection and XSS. This process flags potential risks by comparing code against known vulnerable patterns and secure coding examples.
During a PHP security audit, look for SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), and insecure authentication or authorization flaws. Identifying these vulnerabilities ensures web application safety before merging new features.
Check for CSRF and authentication flaws by applying secure coding pattern knowledge to the code review process. The audit recognizes insecure authorization implementations and provides guidance on correcting them with secure code snippets.
The security audit is designed for vulnerability assessment and secure development practices within the IBL5 project. While it identifies common PHP vulnerabilities, its secure coding guidance is specifically tailored to the IBL5 application context.
You need knowledge of secure coding patterns and common web application attack vectors to effectively use this PHP vulnerability scanner. It identifies risks based on these patterns, requiring familiarity with security concepts to interpret and apply the results.
The best way to prevent SQL injection is to follow secure coding guidance that contrasts vulnerable code with secure snippets. Auditing code before merges helps identify and replace risky patterns with safe development practices.
tense-iImplement secure coding practices based on the OWASP Top 10.
raphaelmansIdentify and remediate security vulnerabilities across code, APIs, and data flows.
vinaykumarvkScan codebases for security flaws, quality issues, and accessibility violations.
voidrotConfigure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.
