security-review-owasp-php-configuration

What problem does it solve?

This Skill helps reviewers identify security weaknesses in PHP configuration, deployment, and operational controls that can expand attacker reach, weaken isolation, or expose privileged management paths.

Core Features & Use Cases

• Runtime and privilege review: Checks service accounts, process privileges, admin surfaces, and debug paths for excessive access.
• Configuration and isolation analysis: Evaluates tenancy boundaries, environment drift, hardening gaps, and secret exposure across deployments.
• Dependency and operational trust review: Looks for risky package, plugin, image, or module assumptions, plus missing safeguards such as scanning, policy enforcement, and rollback readiness.
• Use case: Review a PHP application, container setup, or deployment pipeline to confirm whether the configuration matches OWASP guidance and whether any exposed control plane or privilege boundary creates real compromise risk.

Quick Start

Use the security-review-owasp-php-configuration skill to review the provided PHP code, manifests, and deployment settings for privilege, isolation, and operational hardening issues.