Security review for PHP, Laravel and Symfony code.
Plugin php-security-review-skills from marketplace blackpug in gkwelding/php-unit-tests-skills. Commands read from the repo's manifest — 1 month ago.
review-php-securityReview PHP code for security vulnerabilities, with framework-specific checks for Laravel and Symfony: missing authorisation and IDOR, mass assignment, SQL/DQL and shell injection, unsafe unserialize, XSS in Blade and Twig, CSRF exemptions, file uploads, SSRF, open redirects, CORS, session and login
Upgrade Laravel (10 to 13), Symfony (6.4 to 8) and PHPUnit / Pest one major at a time: reads composer.lock, plans each step, applies the official breaking changes, uses Rector where it applies, runs the tests after every step and stops with a report when a package blocks.
3 skills
Write and review database schema migrations safely in Laravel and Symfony (Doctrine Migrations): shipped migrations left alone, reversible down(), zero-downtime ordering, large-table DDL, batched backfills, verified against a disposable database.
2 skills
Review and write background jobs in Laravel (queues, jobs, listeners, batches, chains) and Symfony Messenger.
2 skills
Fix PHPStan, Larastan and Psalm errors properly and raise a project's analysis level, without ignores, baseline growth or type lies.
2 skills
Plan and generate PHPUnit / Pest tests for PHP, Laravel and Symfony code.
2 skills
Find and fix database query problems in Laravel (Eloquent) and Symfony (Doctrine ORM) code, above all N+1 queries.
1 skill
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Professional UI/UX design intelligence for AI coding assistants. Includes searchable databases of styles, colors, typography, charts, and UX guidelines for React, Next.js, Astro, Vue, Nuxt.js, Nuxt UI, Svelte, SwiftUI, React Native, Flutter, Tailwind, shadcn/ui, Jetpack Compose, Angular, Laravel, JavaFX, and Three.js.
7 skills
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Secure App Builder" editorial skill bundle for Claude Code.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.