Overview
Security audit patterns for PHP applications following OWASP guidelines. Covers XXE, SQL injection, XSS, CSRF detection, CVSS v3.1 scoring, and secure coding practices. By Netresearch.
Detailed guide coming soon. We haven't written a full guide for this skill yet.
Related
Skill github-project
GitHub repository setup and platform-specific features. Branch protection, CODEOWNERS, Issues/Discussions/Projects, PR review workflows with conversation resolution, Dependabot/Renovate auto-merge, and GitHub Releases. Platform-only — CI/CD and security live in sibling skills. By Netresearch.
Skill enterprise-readiness
Assess and enhance software projects for enterprise-grade security, quality, and automation. Includes supply chain security (SLSA, signing, SBOMs), quality gates, and platform-specific hardening with dynamic scoring.
Skill github-release
Safe, automated GitHub releases with supply chain security. Prevents dangerous gh release commands, orchestrates version bumps, signed tags, and CI-driven releases across ecosystems.
Skill orocommerce
OroCommerce development guidance covering entities, datagrids, REST API, workflows, frontend, security, integration, and bundle scaffolding. By Netresearch.
Skill typo3-site-conformance
Conformance and hardening for deployable TYPO3 v14 site/project repos (type:project + Docker/Compose): layout, Compose topology, Concourse CI, supply-chain gating (Trivy/SBOM/cosign), secret-free config, Valkey/ofelia runtime. Site/project counterpart to typo3-conformance.
Skill security-guidance
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns