skills.rest
netresearch
netresearchOFFICIAL
Explore all skills by this author →
Website𝕏@netresearchGitHub

security-audit

Detect security vulnerabilities in PHP applications and score risks with CVSS v3.1.

51|13|Updated Oct 18, 2025
Search Tags:#automation#vulnerability#php#owasp#best-practices#security-audit
One-click install
npx skills add https://github.com/netresearch/claude-code-marketplace --skill security-audit-netresearch
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/netresearch/claude-code-marketplace/tree/main/skills/security-audit
Command: npx skills add https://github.com/netresearch/claude-code-marketplace --skill security-audit-netresearch

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides expert patterns for conducting security audits, vulnerability assessment, and secure coding practices aligned with OWASP guidelines.

Core Features & Use Cases

  • Vulnerability assessment patterns (XXE, SQLi, XSS, CSRF) and secure coding patterns
  • OWASP Top 10 detection patterns and remediation guidance
  • CVSS v3.1 scoring integration for risk prioritization
  • PHP security hardening and secure configuration references
  • Automates reproducible security checks across PHP projects

Quick Start

Run the security audit on your PHP project: security-audit /path/to/your/php-project to identify vulnerabilities and generate a secure coding checklist.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect security vulnerabilities in PHP applications?▼

Vulnerability detection in PHP identifies common flaws like SQL injection, XSS, CSRF, XXE, and authentication issues. This Skill automates pattern-based scanning to find these vulnerabilities during security audits, then prioritizes them using CVSS v3.1 scoring for risk assessment.

What is OWASP Top 10 remediation and why does it matter for PHP security?▼

OWASP Top 10 lists the most critical web application security risks. This Skill provides detection patterns and remediation templates aligned with OWASP guidelines, helping you address PHP-specific vulnerabilities and secure coding practices in your projects.

Can I automate security audits across multiple PHP projects?▼

Yes. This Skill automates reproducible security checks by running vulnerability assessments, CVSS scoring, and hardening checklists across PHP projects, reducing manual effort and ensuring consistent security evaluation across your codebase.

How does CVSS v3.1 scoring help prioritize security findings?▼

CVSS v3.1 scoring quantifies vulnerability severity, helping you prioritize which issues to remediate first. This Skill integrates CVSS scoring with vulnerability detection so you can focus remediation efforts on high-impact risks.

What PHP security hardening practices does this Skill cover?▼

This Skill provides PHP-specific hardening checklists and secure configuration references, including input validation, output encoding, and authentication patterns. These templates guide you through securing common PHP vulnerabilities identified during audits.

Related Skills

Explore More Software Engineering Skills→
seiei-sogenseiei-sogen

ipa-security-check

Detect security vulnerabilities in source code via IPA-aligned static analysis.

Community
Advanced
randalmurphalrandalmurphal

Vulnerability Triage & Prioritization

Compute CVSS scores and prioritize vulnerabilities with weighted ranking.

Community
Basic
adityaarsharmaadityaarsharma
2

orbit-wp-security

Detect security vulnerabilities in WordPress plugin PHP source code via static analysis.

Community
Advanced
j0KZj0KZ

security-scanner

Scan JavaScript/TypeScript codebases for OWASP Top 10 risks and secrets.

Community
Advanced