Enforce PHP 8.3+ security, performance, and coding standards with PHPStan and Psalm.
npx skills add https://github.com/martinholovsky/SOTA-skills --skill sota-php
Please help me install this Agent Skill. Skill: sota-php Source: https://github.com/martinholovsky/SOTA-skills/tree/main/skills/sota-php Command: npx skills add https://github.com/martinholovsky/SOTA-skills --skill sota-php
This Skill helps engineers build and audit PHP code, ensuring adherence to modern standards and best practices.
Run the sota-php skill on your PHP codebase to start auditing and enforce best practices.
High-intent search queries and answers about installing and using this skill.
Automate PHP code review by running an audit mode that analyzes existing code to identify non-compliance, potential OWASP vulnerabilities, and areas for improvement using static analysis tools.
Yes, you can use PHPStan and Psalm together to enforce 2026 state-of-the-art PHP coding standards, ensuring code quality, security, and performance compliance across your application.
The minimum requirement for state-of-the-art static analysis is PHP 8.3+. You also need Composer installed to manage dependencies and run the underlying analysis tools effectively.
Check your PHP application for OWASP vulnerabilities automatically by running an audit process that reviews the codebase to identify security lapses and adherence to modern best practices.
Yes, static analysis works with existing PHP codebases through an audit mode that identifies non-compliance, potential vulnerabilities, and areas for improvement without requiring immediate code changes.
The best way to ensure PHP performance optimization during code review is to use a build mode that automatically enforces performance optimizations alongside security measures and modern coding standards.
nazrulsoftwaredevAutomate Laravel environment checks, static analysis, and deployment readiness gates.
QuestNova502Identify and remediate PHP security vulnerabilities using OWASP patterns.
robertbr123Automate code review with security scans, quality checks, and automated fixes.
AgentSecOpsAutomate OWASP ZAP dynamic security scans for web applications and APIs.
